FAQs

NAC Gateway Rejects 802.1X Radius Requests From Securestack/D-Series Switch

  • 1.  NAC Gateway Rejects 802.1X Radius Requests From Securestack/D-Series Switch

    Posted 09-04-2013 23:03
    Article ID: 10483

    Products
    SecureStack C3, firmware 1.01.01.0039 through 1.01.03.0003
    SecureStack C2, firmware 5.01.01.0039 through 5.01.03.0007
    SecureStack B3, firmware 1.01.01.0039 through 1.01.03.0003
    SecureStack B2, firmware 4.01.01.0039 through 4.01.03.0007
    D-Series, firmware 1.00.00.0029 through 1.00.04.0001
    NAC Gateway

    Changes
    802.1x user attempts to login using incorrect Radius credentials.

    Symptoms
    The login attempt fails, and the user is rejected by the NAC Gateway as expected.
    Additional login attempts using correct credentials are also rejected by the NAC Gateway.

    Solution
    For the C3, upgrade to firmware 1.01.04.0001 or higher.
    For the C2, upgrade to firmware 5.01.04.0001 or higher.
    For the B3, upgrade to firmware 1.01.04.0001 or higher.
    For the B2, upgrade to firmware 4.01.04.0001 or higher.
    For the D-Series, upgrade to firmware 6.03.01.0008 or higher.

    Release notes state, in the 'Firmware Changes and Enhancements' section:
    10396 Corrected an issue whereby after an initial invalid RADIUS request fails, subsequent valid requests were rejected for the same user due to caching of the initial RADIUS state attribute.

    Also upgrade NAC Gateways to version 3.1.0.84 or higher.