Support RADIUS with RadSec (GS1900 series and ideally others)

coderjoe

Following the announcement of the BlastRadius MITM attack (https://www.blastradius.fail/) I'm being asked to help evaluate mitigation options across a number of networks I help manage.

Some of these networks use GS1900 series Switches from Zyxel, but though they do state they support RADIUS in their product documentation, they do not appear to support RadSec as far as I can tell from their administration interfaces.

Would it be possible to add RadSec support to this line of switches (and ideally other Zyxel switches which support RADIUS) so that if my clients choose to request RadSec we can comply without having to order replacement switches?

In addition can Zyxel product documentation be updated for all switches to clarify whether they support RADIUS with RadSec or not?

Zyxel_Melen

Hi @coderjoe,

Thanks for your input. After investigation, we found that GS1900 has a device limitation. Therefore, it cannot support RadSec.

Regarding the documentation, since current switch models only support RADIUS, we did not mention RadSec on the datasheet or our website. Please be assured that once the switch supports RadSec, we will update the datasheet and our website.