For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

HarshaNK's avatar
HarshaNK
Icon for Altostratus rankAltostratus
Dec 02, 2025

Single User Unable to Connect to VPN over F5 APM

Hi Everyone,

We have a F5 APM for VPN using Radius servers for authenticating the users. We See that one user is unable to access VPN and when checked logs we see this 

RADIUS module: authentication with 'Username' failed: Access-Reject packet from host 127.7.0.3:1812 (3)

Can someone please clarify if this is being rejected on APM or on Radius Server

4 Replies

  • Radius Team are not seeing any entries for this auth session

  • Hello HarshaNK​ 

    Access-Reject should come from Radius
    You see loopback addrees cause i guess you have a Radius Server Pool and not a direct Radius Server.

    You should therefore see logs on Radius side.
    You could also capture traffic to be sure that request reached Radius Server

    Moreover, as it happens for a specific user, check if there are non-ASCII characters on username or password

  • Hi Injeyan_Kostas​ 

    Thanks for your response ,  Got the clarification for the loopback address in log.

    We have verified with the Radius Server team and they were not able to see logs for the attempt.

    The Password is working for other applications , only for VPN the user is facing issues.

    We will check by adding a packet capture and validate.

  • Hi,

     

    Usually APM cannot generate an "Access-Reject" by itself — it only reports what RADIUS sends. We need to verify the logs in radius and if there no logs you can just check and confirm F5 errors

    /var/log/apm
    /var/log/ltm

     

    BR
    Aswin