000025689 - How to suppress the class attribute from RSA RADIUS for RSA Authentication Manager 8.x

This article explains how to:

• Suppress class attribute from the RSA RADIUS response.
• Address problems with the default Steel-Belted RADIUS class attribute.
• Resolve when NAS devices receive a Class=SBR2CL\0xbc\0xb1\0xf90x95\0xe4\0xec\0xcd\0xa8\ when profiles return a Class attribute.

1. Locate the vendor.ini in the Operations Console (Deployment Configurations > RADIUS Servers > Manage Server Files > vendor.ini)
2. Click the context arrow next to the vendor.ini and select Edit.
3. Locate the entries for the NAS vendor that corresponds to your RADIUS profile. In this example, we will look at the lines for standard RADIUS:

vendor-product          = - Standard Radius -
dictionary              = Radius
ignore-ports            = no
help-id                 = 2000

4. Change it to add the text send-class-attribute = no, as follows:

vendor-product         = - Standard Radius -
dictionary             = Radius
ignore-ports           = no
help-id                = 2000
send-class-attribute   = no

5. When done, click Save & Restart RADIUS Server.  This restart allows the debug changes to take effect.