KB 170050: How to configure IDENTIKEY Appliance to allow RADIUS requests with no NAS Identifier or no NAS IP1/3/2018 4:52:16 PM
By default RADIUS requests without NAS Identifier or NAS IP are not accepted by the IDENTIKEY Appliance.
When sending RADIUS requests without NAS Identifier you will see the following errors in the logging:
[ValidationTask::getNASLocationFromPacket] > No NAS-IP or NAS-Identifier
[ValidationTask::process] > Rejecting RADIUS request due to missing NAS
You can download a bun package for your IDENTIKEY Appliance version by logging on to the VASCO Customer Portal. There select “IDENTIKEY Appliance Offline upgrade packages”, click on your version and download the package.
Log in to the Configuration tool and select System => Update. browse to the bun package “radius-no-nas-id-x.x.x.bun” and continue the wizard. Tick the option “Allow Unspecified NAS and complete the wizard.
If on a later time you want to uninstall this patch, please follow the above procedure but when arriving at the above screen untick the option “Allow Unspecified NAS” and complete the wizard.
Upgrading the IDENTIKEY Appliance does not require installing the patch again. If you have multiple Appliances in replication, you need to install the patch on every single Appliance.
Applies to: IDENTIKEY Appliance/IDENTIKEY Virtual Appliance
KB 170050– 3/01/2018
© 2018 VASCO Data Security. All rights reserved.