Hi Fabrice, Yes it is. However I've tried the controllerIp variable set to the SSID interface, the registration SSID interface, and also unticked, all with the same result. I suspect this is something at the WLC end, and I remember this coming up before so wondered whether a workaround had been found. I found Jake's solution of adding the registration interface as a second radius controller to the WLC, but that hasn't worked either.
I will look into enabling debug on the WLC to help with this. Cheers, Andi -----Original Message----- From: Fabrice DURAND [mailto:[email protected]] Sent: 15 May 2015 16:17 To: [email protected] Subject: Re: [PacketFence-users] radius disconnect in Cisco WLC Hello Andi, is 192.168.196.13 is the management interface of the wlc ? Regards Fabrice Le 2015-05-15 10:35, Morris, Andi a écrit : > > Hi all, > > A while back I remember that there was an issue with Cisco WLC > controllers not behaving when PF sends a radius disconnect message to > them. Does anybody know if this was ever resolved by Cisco, or has a > work around been found? I have 5.0.1 in dev at the moment, using a > Cisco WLC 5760 (version 03.06.01E RELEASE SOFTWARE (fc3)). When > unregistering devices from my nodes tab I see the following in > packetfence.log: > > > > May 15 14:51:23 httpd.webservices(4941) WARN: Unable to perform RADIUS > Disconnect-Request: No answer from 192.168.196.13 on port 3799 at > /usr/local/pf/lib/pf/util/radius.pm line 145. (pf::Switch::__ANON__) > > May 15 14:51:33 httpd.webservices(4941) WARN: Unable to perform RADIUS > Disconnect-Request: Timeout waiting for a reply from 192.168.196.13 on > port 3799 at /usr/local/pf/lib/pf/util/radius.pm line 163. > (pf::Switch::__ANON__) > > May 15 14:51:33 httpd.webservices(4941) ERROR: Wrong RADIUS secret or > unreachable network device... (pf::Switch::__ANON__) > > > > I have RFC 3576 support enabled on the WLC. > > > > Cheers, > > Andi > > > > ------------------------------------- > > Andi Morris > > IT Security Officer > Cardiff Metropolitan University > > T: 02920 205720 > E: [email protected] <mailto:[email protected]> > > -------------------------------------- > > > > ---------------------------------------------------------------------- > -- > > Cardiff Metropolitan University - 150 years of nurturing talent > <http://www.cardiffmet.ac.uk/cardiffmet150> > > > ---------------------------------------------------------------------- > -------- One dashboard for servers and applications across > Physical-Virtual-Cloud Widest out-of-the-box monitoring support with > 50+ applications Performance metrics, stats and reports that give you > Actionable Insights Deep dive visibility with transaction tracing > using APM Insight. > http://ad.doubleclick.net/ddm/clk/290420510;117567292;y > > > _______________________________________________ > PacketFence-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Fabrice Durand [email protected] :: +1.514.447.4918 (x135) :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence (http://packetfence.org) ------------------------------------------------------------------------------ One dashboard for servers and applications across Physical-Virtual-Cloud Widest out-of-the-box monitoring support with 50+ applications Performance metrics, stats and reports that give you Actionable Insights Deep dive visibility with transaction tracing using APM Insight. http://ad.doubleclick.net/ddm/clk/290420510;117567292;y _______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
