Article ID: 10483
Products
SecureStack C3, firmware 1.01.01.0039 through 1.01.03.0003
SecureStack C2, firmware 5.01.01.0039 through 5.01.03.0007
SecureStack B3, firmware 1.01.01.0039 through 1.01.03.0003
SecureStack B2, firmware 4.01.01.0039 through 4.01.03.0007
D-Series, firmware 1.00.00.0029 through 1.00.04.0001
NAC Gateway
Changes
802.1x user attempts to login using incorrect Radius credentials.
Symptoms
The login attempt fails, and the user is rejected by the NAC Gateway as expected.
Additional login attempts using correct credentials are also rejected by the NAC Gateway.
Solution
For the C3, upgrade to firmware 1.01.04.0001 or higher.
For the C2, upgrade to firmware 5.01.04.0001 or higher.
For the B3, upgrade to firmware 1.01.04.0001 or higher.
For the B2, upgrade to firmware 4.01.04.0001 or higher.
For the D-Series, upgrade to firmware 6.03.01.0008 or higher.
Release notes state, in the 'Firmware Changes and Enhancements' section:
10396 Corrected an issue whereby after an initial invalid RADIUS request fails, subsequent valid requests were rejected for the same user due to caching of the initial RADIUS state attribute.
Also upgrade NAC Gateways to version 3.1.0.84 or higher.
