I am having issues with getting clearpass to switch vlan assignments on a Cisco 3650 switch. I can run manual CoA change status in access tracker but I cannot use a enforcement profile to change the vlan from a restricted vlan to a all access vlan based on successful health posture. My initial radius service works fine and assigns users to restricted vlan 203 if the health posture does not equal HEALTHY:
But for some reason my WEBAUTH service enforcement policy will not send the CoA to switch the vlan to all access vlan 196:
When I check access tracker I cannot send the CoA using this profile:
But I can send some of the dynamic auth CoA profiles:
------------------------------
abraham
------------------------------