Assertion Authenticate against radius fail with reason code 0 after upgrade

Products

• CA API Gateway

Issue/Introduction

After upgrading to gateway 11.1 all services using Radius are  failing  in the assertion 'authenticate against radius server' while in older version it works .

The ssg log shows a UnknownHostException

2024-10-23T10:19:27.481+0200 WARNING 843  STDERR: java.net.UnknownHostException: 0xFFFFFFFF

Which seems to match  the attribute Framed-IP-Address which is set to  0xFFFFFFFF

Environment

Gateway 11.1.x 

Resolution

The newer JDK versions used by gateway seems to handle the attribute value "0xFFFFFFFF" differently since it is performing DNS resolution on it  which is causing a exception

"IllegalArgumentException: Invalid IP address literal: 0xFFFFFFFF"

In the RFC 2865 , there is another special value 0xFFFFFFFE for this attribute, which is also represented as a proper IP address 255.255.255.254 later in the RFC.

A workaround for this would be to set the Framed-IP-Address attribute value to "255.255.255.255"