Hi Nicolas, I found the issue in my WLC version. Unfortunatelly mobility express controller with version < 8.7 have the CoA support broken (Cisco TAC verified).
Enrico On 18/09/19 15:27, Nicolas Quiniou-Briand via PacketFence-users wrote: Hello Enrico, First, CoA Messages and Disconnect-Messages are different, see RFC5176 [1] but they use same port 3799. In some cases 1700. Based on this: *radiusRFC3576TransportThread: Sep 10 14:47:42.312: RFC3576 - Received IP Address : WLC_IP, Vlan ID: (received 0), management IP WLC_IP *radiusRFC3576TransportThread: Sep 10 14:47:42.312: Handling a valid 'RFC-3576 Disconnect-Request' regarding station 18:1d:ea:5d:4b:d9 *radiusRFC3576TransportThread: Sep 10 14:47:42.312: Sent a RFC3576 message 'RFC-3576 Disconnect-Ack' to PacketFence_IP:(port:46269) Your device has been disconnected using a Disconnect-Message, not a CoA-Message. So WLC will send a new RADIUS request and PacketFence should return a new role. Take a look at packetfence.log when a device is trying to register. [1] https://tools.ietf.org/html/rfc5176#section-2 -- Enrico Pasqualotto [https://www.backloop.biz/backloop_loghi/LOGO_BackLoop_small.png] Private mail: [email protected]<mailto:[email protected]> Office: +39 045 9971269 Le informazioni contenute in questo messaggio di posta elettronica e negli eventuali allegati sono riservate e confidenziali e sono indirizzate esclusivamente al destinatario. Si prega di non fare copia, inoltrare a terzi o conservare tale messaggio se non si รจ il legittimo destinatario dello stesso. Qualora questo messaggio sia stato ricevuto per errore, si prega di rinviarlo al mittente e di cancellarlo permanentemente dal proprio computer. The information contained in this message and in any attachment is intended exclusively for the recipient. If you are not the intended recipient you are hereby notified not to copy, save, disclose, or distribute it to any third party. If you erroneously received this message you are kindly requested to return it to the sender and eliminate it permanently from your computer.
_______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
