iRule based RADIUS Client Stack
Code is community submitted, community supported, and recognized as ‘Use At Your Own Risk’.
Short Description
The iRule based RADIUS Client Stack can be used to perform RADIUS based user authentication via SIDEBAND UDP connections.
Problem solved by this Code Snippet
The RADIUS Client Stack covers the RADIUS protocol core-mechanics outlined in RFC 2865 and RFC 5080 and can be utilized for a Password Authentication Protocol (PAP) authentication within an iRule.
How to use this Code Snippet
Visit my GitHub Repository for further explanations how the RADIUS Client Stack can be used to perform RADIUS Client operations within an iRule.
Code Snippet Meta Information
- Version: 1.1
- Coding Language: TCL
Full Code Snippet
Visit: https://github.com/KaiWilke/F5-iRule-RADIUS-Client-Stack
Updated Mar 03, 2026
Version 2.0Kai_Wilke
MVP
My name is Kai Wilke and I'm working as a Principal Consultant for IT-Security at itacs GmbH - a German consulting company specialized in Microsoft Security cloud solutions, F5 customizations as well as for classic IT-Consulting.
You can find additional information about me and my work here:
https://devcentral.f5.com/articles/q-a-with-itacs-gmbhs-kai-wilke-devcentrals-featured-member-for-february-248901 Comment
Updated the RADIUS Client Stack to include RadiusBlast mitigation based on latest Radius RFC draft documents.
https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/