Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP APM
Known Affected Versions:
12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2, 12.1.1, 12.1.2, 12.1.3, 12.1.3.1
Fixed In:
13.0.0, 12.1.3.2
Opened: Jun 06, 2014 Severity: 3-Major
Sometimes 60 sec timeout for AAA Radius server is not enough especially when users need to provide input. Following error message will be displayed when user tries to set timeout value greater than 60 : "01090676:3: The requested timeout value (120) out of range for aaa radius server (/Common/test-radius-server). (1-60)"
Users can not set timeout value to more than 60 sec for AAA Radius server. If response time is more than 60 sec from AAA Radius server, users may not login and access resources if two factor auth is configured.
This only occurs whenever following conditions are met: - APM is licensed and provisioned - AAA Radius server is configured - Radius Auth agent is included in the access policy
There is no workaround.
Increased the AAA Radius Server timeout range from 0-60 to 0-180.