Forum Discussion

shoneycutt_8454's avatar
shoneycutt_8454
Icon for Nimbostratus rankNimbostratus
Nov 07, 2017

When using the radius monitor should the F5 accept the access-reject message as a successful response to the monitor?

I'm trying to use the radius monitor on an f5 running 11.4.1. I have configured the uname/password/secret information. In the debug of the monitor I see the access-request go out and the access-rej...
devops
LTM
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Jan 22, 2019

Hi Jan,

 

Awesome idea to construct the payload of a NULL-User Radius request. Thumps up for that one!

 

Note: The expect-string seems to trigger on the (encrypted) Response Authenticator field (16bytes), so other peers would need to know your Shared-Key to adopt this solution. Looking for a sequence of \x03\x00\x00 (responce code, request id, first byte of the length field) should be a slightly more generic approach.

 

Cheer, Kai

 

  • Bart's avatar
    Bart
    Icon for Nimbostratus rankNimbostratus
    Dec 11, 2020

    awesome , thanks for the idea