Last Modified: Nov 07, 2022
Known Affected Versions:
13.1.0, 22.214.171.124, 126.96.36.199, 188.8.131.52, 184.108.40.206, 220.127.116.11, 18.104.22.168, 22.214.171.124
Opened: Mar 07, 2018 Severity: 3-Major
RADIUS Accounting requests egress different self IP addresses. * START accounting message egresses floating self IP addresses. * STOP accounting message egresses local self IP addresses. Some RADIUS messages will come from floating IP addresses, some from self IP addresses. The RADIUS server should be configured to accept all self- and floating-IP addresses of all the devices in the high availability (HA) group, to ensure all messages are received.
Causes RADIUS server to be unable to reconcile accounting messages.
RADIUS server configured with pool option.
You can reconcile accounting messages by tracking them through the Acct-Session-Id in RADIUS AVP's message, which is the same for the corresponding START and STOP messages to uniquely identify the session.
RADIUS START and STOP messages now egress the same interface.