add input validation for NAS-Identifier