NAC Gateway Rejects 802.1X Radius Requests From Securestack/D-Series Switch

  • 0
  • 1
  • Article
  • Updated 5 years ago
  • (Edited)
Article ID: 10483 

Products
SecureStack C3, firmware 1.01.01.0039 through 1.01.03.0003
SecureStack C2, firmware 5.01.01.0039 through 5.01.03.0007
SecureStack B3, firmware 1.01.01.0039 through 1.01.03.0003
SecureStack B2, firmware 4.01.01.0039 through 4.01.03.0007
D-Series, firmware 1.00.00.0029 through 1.00.04.0001
NAC Gateway 

Changes
802.1x user attempts to login using incorrect Radius credentials. 

Symptoms
The login attempt fails, and the user is rejected by the NAC Gateway as expected.
Additional login attempts using correct credentials are also rejected by the NAC Gateway. 

Solution
For the C3, upgrade to firmware 1.01.04.0001 or higher.
For the C2, upgrade to firmware 5.01.04.0001 or higher.
For the B3, upgrade to firmware 1.01.04.0001 or higher.
For the B2, upgrade to firmware 4.01.04.0001 or higher.
For the D-Series, upgrade to firmware 6.03.01.0008 or higher. 

Release notes state, in the 'Firmware Changes and Enhancements' section:
10396  Corrected an issue whereby after an initial invalid RADIUS request fails, subsequent valid requests were rejected for the same user due to caching of the initial RADIUS state attribute.

Also upgrade NAC Gateways to version 3.1.0.84 or higher.
Photo of FAQ User

FAQ User, Official Rep

  • 13,610 Points 10k badge 2x thumb

Posted 5 years ago

  • 0
  • 1

There are no replies.

This conversation is no longer open for comments or replies.