Last Modified: Dec 18, 2024
Affected Product(s):
BIG-IP APM
Known Affected Versions:
15.1.8.1, 15.1.8.2, 15.1.9, 15.1.9.1, 15.1.10, 15.1.10.2, 15.1.10.3, 15.1.10.4, 15.1.10.5, 15.1.10.6, 16.1.3, 16.1.3.1, 16.1.3.2, 16.1.3.3, 16.1.3.4, 16.1.3.5, 16.1.4, 16.1.4.1, 16.1.4.2, 16.1.4.3
Fixed In:
17.1.2, 16.1.5
Opened: Aug 24, 2023 Severity: 3-Major
When the VPN tunnel is terminated, 'Radius Accounting-Request (STOP)' does not include AVP Framed-IP-Address when the Network Access resource is configured with IPv4 & IPv6.
APM sends a 'Radius Accounting-Request (STOP)' that does not include the AVP Framed-IP-Address.
This issue occurs under the following conditions: -- Network Access resource is configured with both IPv4 and IPv6. -- PPP IP address can be either static (obtained from RADIUS) or dynamic (obtained from the lease pool). -- Using an Edge client or a browser. -- VPN tunnel is terminated.
Configure only IPv4 IP addresses for the Network Access resource.
Include Framed IPv6 Address in RADIUS Acct STOP message when assigned clientip is IPv6.