Bug ID 518981: RADIUS accounting STOP message may not include long class attributes

Last Modified: Apr 10, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP APM(all modules)

Known Affected Versions:
11.5.1, 11.5.1 HF1, 11.5.1 HF10, 11.5.1 HF11, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.2, 11.5.2 HF1, 11.5.3, 11.5.3 HF1, 11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4, 11.6.0 HF5

Fixed In:
12.0.0, 11.6.0 HF6, 11.5.3 HF2

Opened: Apr 20, 2015
Severity: 3-Major

Symptoms

The class attribute should be sent back to RADIUS server unmodified. However, if the RADIUS server is configured to send lots of long class attributes, the BIG-IP system might drop them when sending accounting stop message.

Impact

RADIUS Accounting server doesn't receive STOP message when user session is over.

Conditions

The BIG-IP system is configured with an Access Policy that contains RADIUS Acct agent. The RADIUS server is configured to send class attributes with total size of greater than 512bytes.

Workaround

None

Fix Information

Previously, the BIG-IP system would not send an accounting stop message if class attributes were more than 512 bytes total size. Now, BIG-IP system sends the accounting stop message, but does not include class attributes.

Behavior Change