Forum Discussion

Marcus_59536's avatar
Marcus_59536
Icon for Nimbostratus rankNimbostratus
Apr 01, 2009

Send a deny to a radius user by parsing "username"

There are certain devices on our network that need to continually request a login from a radius server from a bogus account. This is done to ensure that they see the radius service as "up".

 

 

Since this is done, we get thousands of lines of log messages pertaining to this bogus account on the radius server.

 

 

I need the F5 to send a "deny" back to anyone that tries to authenticate with this "bogus",predetermined account information.

 

 

Any ideas? Thanks in advance.
application delivery
dev
devops
iRules
  • Colin_Walker_12's avatar
    Colin_Walker_12
    Historic F5 Account
    Apr 01, 2009
    You'd want to parse the incoming request to find the user and see if it matches your bogus one. If so, just send a response with UDP::respond.

     

     

    There's a great example of someone doing some in-depth Radius parsing in the CodeShare - Click here

     

     

    HTH,

     

    Colin