Forum Discussion

fandong's avatar
fandong
Icon for Nimbostratus rankNimbostratus
Mar 12, 2014

APM : Radius Challenge/Response authentication

Hi, everyone

 

I know F5 apm must support Challenge/Response mode for Radius authentication. someone says that apm supports RADIUS challenge/response authentication without additional configuration. I am so confused, I think Access policy will be something like that Start-> Logon Page -> Radius Auth--Access-Challenge-> Challenge Page-->Radius Auth-- Access-Accept--> Resource Assignment if i configure radius server only,it will auto create Challenge or OTP page ?

 

Thanks for any tips

 

APM
deployment
security

2 Replies

Sort By
  • amolari's avatar
    amolari
    Icon for Cirrus rankCirrus
    Mar 12, 2014

    You just need to perform a Radius Auth. Straightforward. FYI APM doesn't support customization (text/images) of the challenge page. Following RFE exists for that: 

    ID 395710-Need ability to customize RADIUS Challenge/Response Page in APM
    .

  • amolari's avatar
    amolari
    Icon for Cirrus rankCirrus
    Mar 12, 2014

    Start -> Logon Page -> Radius Auth -> Resource Assignment The APM will act accordingly (present another page asking for OTP) if it receives an Access-Challenge from the Radius server. You don't need to take care of that (and can't.. as refered with the RFE for customization). If you have multiple Radius server.. be careful with the LB, as if you don't persist correctly, APM may send the Request to Srv1 and the Challenge to Srv2.