RSA Authentication Manager cannot connect to any identity routers. Authenticate Tokencodes are not available.
2 years ago
Originally Published: 2017-06-15
Article Number
000065201
Applies To
RSA Product Set: SecurID Access
Issue
As an RSA Authentication Manager Operations Console administrator you are configuring the Authentication Manager to accept Authenticate App tokencodes.

The following error is displayed when clicking the Test Connection button:
 
There was a problem processing your request
Authentication Manager cannot connect to any identity routers.  Authenticate Tokencodes are not available.

The Identity Router's /var/log/symplified/symplified.log contains the following error:
 
2017-06-15/18:28:46.196/UTC [ajp-apr-8009-exec-9] ERROR com.symplified.application.appliance.api.authorization.IpAddressChecker[33] - unable to create an ip network range from ip address and netmask
com.symplified.service.shared.utility.IpUtilException: Argument did not split into 4 parts:
 
Cause
A value for Allowed Networks has not been entered for the Identity Routers' API Configuration.  This setting must be populated to enable the IDR to accept authentication API messages from Authentication Manager.
 
User-added image
Resolution
Define the Authentication Manager IP address and netmask as described in Step 4 of the documentation on how to Enable Access to the Identity Router API. 

 
Notes
All Authentication Manager IPs or a range of IPs that include all Authentication Managers must be defined.
Don't see what you're looking for?