Security

Hello

I have a problem with HP2620 POE switches which do not accept CoA (bounce). The configuration in CPPM is good because other AOS switches are working fine! I have already brought the switch to the latest possible firmware "RA16.04.0028".

Within ClearPass I get the message "Unsupported attribute"

Are these 2620 switches too old for this?

I see that in similar issues on this topic often is asked if a VIP IP address is used.

In this case, I am also using a VIP.

What could be or is the problem?

You are sending a Bounce Message which the 2620 is not understanding (is not in the attribute library) and that is the reason why you see this message.

I think you need to add Vendor-Specific = "HP,255 = 'BOUNCE_PORT'"  because that is the correct message that it is expecting for it to work

Hello

I have a problem with HP2620 POE switches which do not accept CoA (bounce). The configuration in CPPM is good because other AOS switches are working fine! I have already brought the switch to the latest possible firmware "RA16.04.0028".

Within ClearPass I get the message "Unsupported attribute"

Are these 2620 switches too old for this?

I see that in similar issues on this topic often is asked if a VIP IP address is used.

In this case, I am also using a VIP.

What could be or is the problem?

Hello Shpat

Thanks for you reply!

Can you tell me where I do need to add those Vendor-Specific values?

Is this in Radius Dynamic Auth Templates?

Also I created a HP 2620 specific Enforcement profile with some added information which I found in the discussion forum for 2920 Switches.

But that was not the solution!

You are sending a Bounce Message which the 2620 is not understanding (is not in the attribute library) and that is the reason why you see this message.

I think you need to add Vendor-Specific = "HP,255 = 'BOUNCE_PORT'"  because that is the correct message that it is expecting for it to work

Hello

I have a problem with HP2620 POE switches which do not accept CoA (bounce). The configuration in CPPM is good because other AOS switches are working fine! I have already brought the switch to the latest possible firmware "RA16.04.0028".

Within ClearPass I get the message "Unsupported attribute"

Are these 2620 switches too old for this?

I see that in similar issues on this topic often is asked if a VIP IP address is used.

In this case, I am also using a VIP.

What could be or is the problem?

You need to create a new dictionary and check the mandatory AVP Pairs necessary to perform VLAN Change or Port Bounce.
Then when you add the Device in ClearPass, you choose that specific template for that device.

Hello Shpat

Thanks for you reply!

Can you tell me where I do need to add those Vendor-Specific values?

Is this in Radius Dynamic Auth Templates?

Also I created a HP 2620 specific Enforcement profile with some added information which I found in the discussion forum for 2920 Switches.

But that was not the solution!

You are sending a Bounce Message which the 2620 is not understanding (is not in the attribute library) and that is the reason why you see this message.

I think you need to add Vendor-Specific = "HP,255 = 'BOUNCE_PORT'"  because that is the correct message that it is expecting for it to work

Hello

I have a problem with HP2620 POE switches which do not accept CoA (bounce). The configuration in CPPM is good because other AOS switches are working fine! I have already brought the switch to the latest possible firmware "RA16.04.0028".

Within ClearPass I get the message "Unsupported attribute"

Are these 2620 switches too old for this?

I see that in similar issues on this topic often is asked if a VIP IP address is used.

In this case, I am also using a VIP.

What could be or is the problem?

Hello Shpat,

Earlier you mentioned, "I think you need to add Vendor-Specific = "HP,255 = 'BOUNCE_PORT'"

I tried editing the original HP radius template and adding your suggestion and then importing it back again, but that didn't succeed. I get an error everytime saying that the XML file is not valid...

Also, you mentioned the ID:255, but that one is already in the existing Radius template.

I have never added an extra line to an existing template or imported a completely new template.

I searched the Internet for Port bounce attributes for an HP2620 switch but I cannot find it.  However, I did find an alternative way for adding VSA for port bounce:

Only I don't have the option "RADIUS Vendors", and can only use import/export.

Any help would be appreciated!

Regards,

Jan

You need to create a new dictionary and check the mandatory AVP Pairs necessary to perform VLAN Change or Port Bounce.
Then when you add the Device in ClearPass, you choose that specific template for that device.

Hello Shpat

Thanks for you reply!

Can you tell me where I do need to add those Vendor-Specific values?

Is this in Radius Dynamic Auth Templates?

Also I created a HP 2620 specific Enforcement profile with some added information which I found in the discussion forum for 2920 Switches.

But that was not the solution!

You are sending a Bounce Message which the 2620 is not understanding (is not in the attribute library) and that is the reason why you see this message.

I think you need to add Vendor-Specific = "HP,255 = 'BOUNCE_PORT'"  because that is the correct message that it is expecting for it to work

Hello

I have a problem with HP2620 POE switches which do not accept CoA (bounce). The configuration in CPPM is good because other AOS switches are working fine! I have already brought the switch to the latest possible firmware "RA16.04.0028".

Within ClearPass I get the message "Unsupported attribute"

Are these 2620 switches too old for this?

I see that in similar issues on this topic often is asked if a VIP IP address is used.

In this case, I am also using a VIP.

What could be or is the problem?

I believe you should create a new RADIUS Dynamic Authorization Template for 2620 with correct attribute.

Export standard ArubaOS - Bounce Switch Port entry and modify it with correct values. 

Untested as I don't have any 26xx available. 

Hello Shpat,

Earlier you mentioned, "I think you need to add Vendor-Specific = "HP,255 = 'BOUNCE_PORT'"

I tried editing the original HP radius template and adding your suggestion and then importing it back again, but that didn't succeed. I get an error everytime saying that the XML file is not valid...

Also, you mentioned the ID:255, but that one is already in the existing Radius template.

I have never added an extra line to an existing template or imported a completely new template.

I searched the Internet for Port bounce attributes for an HP2620 switch but I cannot find it.  However, I did find an alternative way for adding VSA for port bounce:

Only I don't have the option "RADIUS Vendors", and can only use import/export.

Any help would be appreciated!

Regards,

Jan

You need to create a new dictionary and check the mandatory AVP Pairs necessary to perform VLAN Change or Port Bounce.
Then when you add the Device in ClearPass, you choose that specific template for that device.

Hello Shpat

Thanks for you reply!

Can you tell me where I do need to add those Vendor-Specific values?

Is this in Radius Dynamic Auth Templates?

Also I created a HP 2620 specific Enforcement profile with some added information which I found in the discussion forum for 2920 Switches.

But that was not the solution!

You are sending a Bounce Message which the 2620 is not understanding (is not in the attribute library) and that is the reason why you see this message.

I think you need to add Vendor-Specific = "HP,255 = 'BOUNCE_PORT'"  because that is the correct message that it is expecting for it to work

Hello

I have a problem with HP2620 POE switches which do not accept CoA (bounce). The configuration in CPPM is good because other AOS switches are working fine! I have already brought the switch to the latest possible firmware "RA16.04.0028".

Within ClearPass I get the message "Unsupported attribute"

Are these 2620 switches too old for this?

I see that in similar issues on this topic often is asked if a VIP IP address is used.

In this case, I am also using a VIP.

What could be or is the problem?

Hello Goradzd,

Thanks for your response. I tried to modify the existing template with your suggestions. I think the Attribute "BOUNCE_PORT" is not correct, because I get an error message when importing.

Original Message:
Sent: May 29, 2025 04:06 AM
From: GorazdKikelj
Subject: CoA (Bounce) not working on HP 2620 switches

I believe you should create a new RADIUS Dynamic Authorization Template for 2620 with correct attribute.

Export standard ArubaOS - Bounce Switch Port entry and modify it with correct values. 

Untested as I don't have any 26xx available. 

------------------------------
Gorazd Kikelj
MVP Guru 2025

Original Message:
Sent: May 28, 2025 07:28 AM
From: JanPultrum
Subject: CoA (Bounce) not working on HP 2620 switches

Hello Shpat,

Earlier you mentioned, "I think you need to add Vendor-Specific = "HP,255 = 'BOUNCE_PORT'"

I tried editing the original HP radius template and adding your suggestion and then importing it back again, but that didn't succeed. I get an error everytime saying that the XML file is not valid...

Also, you mentioned the ID:255, but that one is already in the existing Radius template.

I have never added an extra line to an existing template or imported a completely new template.

I searched the Internet for Port bounce attributes for an HP2620 switch but I cannot find it.  However, I did find an alternative way for adding VSA for port bounce:

Only I don't have the option "RADIUS Vendors", and can only use import/export.

Any help would be appreciated!

Regards,

Jan

Original Message:
Sent: May 21, 2025 11:24 AM
From: shpat
Subject: CoA (Bounce) not working on HP 2620 switches

You need to create a new dictionary and check the mandatory AVP Pairs necessary to perform VLAN Change or Port Bounce.
Then when you add the Device in ClearPass, you choose that specific template for that device.

------------------------------
Shpat | ACEP | ACMP | ACCP | ACDP
Just an Aruba enthusiast and contributor by cases
If you find my comment helpful, KUDOS are appreciated.

Original Message:
Sent: May 21, 2025 09:16 AM
From: JanPultrum
Subject: CoA (Bounce) not working on HP 2620 switches

Hello Shpat

Thanks for you reply!

Can you tell me where I do need to add those Vendor-Specific values?

Is this in Radius Dynamic Auth Templates?

Also I created a HP 2620 specific Enforcement profile with some added information which I found in the discussion forum for 2920 Switches.

But that was not the solution!

Original Message:
Sent: May 21, 2025 06:57 AM
From: shpat
Subject: CoA (Bounce) not working on HP 2620 switches

You are sending a Bounce Message which the 2620 is not understanding (is not in the attribute library) and that is the reason why you see this message.

I think you need to add Vendor-Specific = "HP,255 = 'BOUNCE_PORT'"  because that is the correct message that it is expecting for it to work

------------------------------
Shpat | ACEP | ACMP | ACCP | ACDP
Just an Aruba enthusiast and contributor by cases
If you find my comment helpful, KUDOS are appreciated.

Original Message:
Sent: May 20, 2025 08:28 AM
From: JanPultrum
Subject: CoA (Bounce) not working on HP 2620 switches

Hello

I have a problem with HP2620 POE switches which do not accept CoA (bounce). The configuration in CPPM is good because other AOS switches are working fine! I have already brought the switch to the latest possible firmware "RA16.04.0028".

Within ClearPass I get the message "Unsupported attribute"

Are these 2620 switches too old for this?

I see that in similar issues on this topic often is asked if a VIP IP address is used.

In this case, I am also using a VIP.

What could be or is the problem?

Hi Jan.

Yeah, I was afraid of that. Didn't have time to test it. 

Try with the following enforcement profile

In quick search I couldn't find what specific RADIUS attributes are supported on 2620.

Best, Gorazd

------------------------------
Gorazd Kikelj
MVP Guru 2025

Original Message:
Sent: Jun 02, 2025 03:47 AM
From: JanPultrum
Subject: CoA (Bounce) not working on HP 2620 switches

Hello Goradzd,

Thanks for your response. I tried to modify the existing template with your suggestions. I think the Attribute "BOUNCE_PORT" is not correct, because I get an error message when importing.

Original Message:
Sent: May 29, 2025 04:06 AM
From: GorazdKikelj
Subject: CoA (Bounce) not working on HP 2620 switches

I believe you should create a new RADIUS Dynamic Authorization Template for 2620 with correct attribute.

Export standard ArubaOS - Bounce Switch Port entry and modify it with correct values. 

Untested as I don't have any 26xx available. 

------------------------------
Gorazd Kikelj
MVP Guru 2025

Original Message:
Sent: May 28, 2025 07:28 AM
From: JanPultrum
Subject: CoA (Bounce) not working on HP 2620 switches

Hello Shpat,

Earlier you mentioned, "I think you need to add Vendor-Specific = "HP,255 = 'BOUNCE_PORT'"

I tried editing the original HP radius template and adding your suggestion and then importing it back again, but that didn't succeed. I get an error everytime saying that the XML file is not valid...

Also, you mentioned the ID:255, but that one is already in the existing Radius template.

I have never added an extra line to an existing template or imported a completely new template.

I searched the Internet for Port bounce attributes for an HP2620 switch but I cannot find it.  However, I did find an alternative way for adding VSA for port bounce:

Only I don't have the option "RADIUS Vendors", and can only use import/export.

Any help would be appreciated!

Regards,

Jan

Original Message:
Sent: May 21, 2025 11:24 AM
From: shpat
Subject: CoA (Bounce) not working on HP 2620 switches

You need to create a new dictionary and check the mandatory AVP Pairs necessary to perform VLAN Change or Port Bounce.
Then when you add the Device in ClearPass, you choose that specific template for that device.

------------------------------
Shpat | ACEP | ACMP | ACCP | ACDP
Just an Aruba enthusiast and contributor by cases
If you find my comment helpful, KUDOS are appreciated.

Original Message:
Sent: May 21, 2025 09:16 AM
From: JanPultrum
Subject: CoA (Bounce) not working on HP 2620 switches

Hello Shpat

Thanks for you reply!

Can you tell me where I do need to add those Vendor-Specific values?

Is this in Radius Dynamic Auth Templates?

Also I created a HP 2620 specific Enforcement profile with some added information which I found in the discussion forum for 2920 Switches.

But that was not the solution!

Original Message:
Sent: May 21, 2025 06:57 AM
From: shpat
Subject: CoA (Bounce) not working on HP 2620 switches

You are sending a Bounce Message which the 2620 is not understanding (is not in the attribute library) and that is the reason why you see this message.

I think you need to add Vendor-Specific = "HP,255 = 'BOUNCE_PORT'"  because that is the correct message that it is expecting for it to work

------------------------------
Shpat | ACEP | ACMP | ACCP | ACDP
Just an Aruba enthusiast and contributor by cases
If you find my comment helpful, KUDOS are appreciated.

Original Message:
Sent: May 20, 2025 08:28 AM
From: JanPultrum
Subject: CoA (Bounce) not working on HP 2620 switches

Hello

I have a problem with HP2620 POE switches which do not accept CoA (bounce). The configuration in CPPM is good because other AOS switches are working fine! I have already brought the switch to the latest possible firmware "RA16.04.0028".

Within ClearPass I get the message "Unsupported attribute"

Are these 2620 switches too old for this?

I see that in similar issues on this topic often is asked if a VIP IP address is used.

In this case, I am also using a VIP.

What could be or is the problem?

Hi Gorazd,

Unfortunately still no success!

I've asked HP support what radius attributes the HP2620 accepts!

Regards,

Jan

Hi Jan.

Yeah, I was afraid of that. Didn't have time to test it. 

Try with the following enforcement profile

In quick search I couldn't find what specific RADIUS attributes are supported on 2620.

Best, Gorazd

------------------------------
Gorazd Kikelj
MVP Guru 2025

Original Message:
Sent: Jun 02, 2025 03:47 AM
From: JanPultrum
Subject: CoA (Bounce) not working on HP 2620 switches

Hello Goradzd,

Thanks for your response. I tried to modify the existing template with your suggestions. I think the Attribute "BOUNCE_PORT" is not correct, because I get an error message when importing.

Original Message:
Sent: May 29, 2025 04:06 AM
From: GorazdKikelj
Subject: CoA (Bounce) not working on HP 2620 switches

I believe you should create a new RADIUS Dynamic Authorization Template for 2620 with correct attribute.

Export standard ArubaOS - Bounce Switch Port entry and modify it with correct values. 

Untested as I don't have any 26xx available. 

------------------------------
Gorazd Kikelj
MVP Guru 2025

Original Message:
Sent: May 28, 2025 07:28 AM
From: JanPultrum
Subject: CoA (Bounce) not working on HP 2620 switches

Hello Shpat,

Earlier you mentioned, "I think you need to add Vendor-Specific = "HP,255 = 'BOUNCE_PORT'"

I tried editing the original HP radius template and adding your suggestion and then importing it back again, but that didn't succeed. I get an error everytime saying that the XML file is not valid...

Also, you mentioned the ID:255, but that one is already in the existing Radius template.

I have never added an extra line to an existing template or imported a completely new template.

I searched the Internet for Port bounce attributes for an HP2620 switch but I cannot find it.  However, I did find an alternative way for adding VSA for port bounce:

Only I don't have the option "RADIUS Vendors", and can only use import/export.

Any help would be appreciated!

Regards,

Jan

Original Message:
Sent: May 21, 2025 11:24 AM
From: shpat
Subject: CoA (Bounce) not working on HP 2620 switches

You need to create a new dictionary and check the mandatory AVP Pairs necessary to perform VLAN Change or Port Bounce.
Then when you add the Device in ClearPass, you choose that specific template for that device.

------------------------------
Shpat | ACEP | ACMP | ACCP | ACDP
Just an Aruba enthusiast and contributor by cases
If you find my comment helpful, KUDOS are appreciated.

Original Message:
Sent: May 21, 2025 09:16 AM
From: JanPultrum
Subject: CoA (Bounce) not working on HP 2620 switches

Hello Shpat

Thanks for you reply!

Can you tell me where I do need to add those Vendor-Specific values?

Is this in Radius Dynamic Auth Templates?

Also I created a HP 2620 specific Enforcement profile with some added information which I found in the discussion forum for 2920 Switches.

But that was not the solution!

Original Message:
Sent: May 21, 2025 06:57 AM
From: shpat
Subject: CoA (Bounce) not working on HP 2620 switches

You are sending a Bounce Message which the 2620 is not understanding (is not in the attribute library) and that is the reason why you see this message.

I think you need to add Vendor-Specific = "HP,255 = 'BOUNCE_PORT'"  because that is the correct message that it is expecting for it to work

------------------------------
Shpat | ACEP | ACMP | ACCP | ACDP
Just an Aruba enthusiast and contributor by cases
If you find my comment helpful, KUDOS are appreciated.

Original Message:
Sent: May 20, 2025 08:28 AM
From: JanPultrum
Subject: CoA (Bounce) not working on HP 2620 switches

Hello

I have a problem with HP2620 POE switches which do not accept CoA (bounce). The configuration in CPPM is good because other AOS switches are working fine! I have already brought the switch to the latest possible firmware "RA16.04.0028".

Within ClearPass I get the message "Unsupported attribute"

Are these 2620 switches too old for this?

I see that in similar issues on this topic often is asked if a VIP IP address is used.

In this case, I am also using a VIP.

What could be or is the problem?

Hi Jan.

:-( I'm still puzzled why standard bounce attribute is not recognized with 16.04 as FW version is relatively recent.

Hopefully you'll get somebody from TAC to provide you with correct attributes. There is nothing in docs regarding COA attributes for 2620.

Best, Gorazd

Hi Gorazd,

Unfortunately still no success!

I've asked HP support what radius attributes the HP2620 accepts!

Regards,

Jan

Hi Jan.

Yeah, I was afraid of that. Didn't have time to test it. 

Try with the following enforcement profile

In quick search I couldn't find what specific RADIUS attributes are supported on 2620.

Best, Gorazd

------------------------------
Gorazd Kikelj
MVP Guru 2025

Original Message:
Sent: Jun 02, 2025 03:47 AM
From: JanPultrum
Subject: CoA (Bounce) not working on HP 2620 switches

Hello Goradzd,

Thanks for your response. I tried to modify the existing template with your suggestions. I think the Attribute "BOUNCE_PORT" is not correct, because I get an error message when importing.

Original Message:
Sent: May 29, 2025 04:06 AM
From: GorazdKikelj
Subject: CoA (Bounce) not working on HP 2620 switches

I believe you should create a new RADIUS Dynamic Authorization Template for 2620 with correct attribute.

Export standard ArubaOS - Bounce Switch Port entry and modify it with correct values. 

Untested as I don't have any 26xx available. 

------------------------------
Gorazd Kikelj
MVP Guru 2025

Original Message:
Sent: May 28, 2025 07:28 AM
From: JanPultrum
Subject: CoA (Bounce) not working on HP 2620 switches

Hello Shpat,

Earlier you mentioned, "I think you need to add Vendor-Specific = "HP,255 = 'BOUNCE_PORT'"

I tried editing the original HP radius template and adding your suggestion and then importing it back again, but that didn't succeed. I get an error everytime saying that the XML file is not valid...

Also, you mentioned the ID:255, but that one is already in the existing Radius template.

I have never added an extra line to an existing template or imported a completely new template.

I searched the Internet for Port bounce attributes for an HP2620 switch but I cannot find it.  However, I did find an alternative way for adding VSA for port bounce:

Only I don't have the option "RADIUS Vendors", and can only use import/export.

Any help would be appreciated!

Regards,

Jan

Original Message:
Sent: May 21, 2025 11:24 AM
From: shpat
Subject: CoA (Bounce) not working on HP 2620 switches

You need to create a new dictionary and check the mandatory AVP Pairs necessary to perform VLAN Change or Port Bounce.
Then when you add the Device in ClearPass, you choose that specific template for that device.

------------------------------
Shpat | ACEP | ACMP | ACCP | ACDP
Just an Aruba enthusiast and contributor by cases
If you find my comment helpful, KUDOS are appreciated.

Original Message:
Sent: May 21, 2025 09:16 AM
From: JanPultrum
Subject: CoA (Bounce) not working on HP 2620 switches

Hello Shpat

Thanks for you reply!

Can you tell me where I do need to add those Vendor-Specific values?

Is this in Radius Dynamic Auth Templates?

Also I created a HP 2620 specific Enforcement profile with some added information which I found in the discussion forum for 2920 Switches.

But that was not the solution!

Original Message:
Sent: May 21, 2025 06:57 AM
From: shpat
Subject: CoA (Bounce) not working on HP 2620 switches

You are sending a Bounce Message which the 2620 is not understanding (is not in the attribute library) and that is the reason why you see this message.

I think you need to add Vendor-Specific = "HP,255 = 'BOUNCE_PORT'"  because that is the correct message that it is expecting for it to work

------------------------------
Shpat | ACEP | ACMP | ACCP | ACDP
Just an Aruba enthusiast and contributor by cases
If you find my comment helpful, KUDOS are appreciated.

Original Message:
Sent: May 20, 2025 08:28 AM
From: JanPultrum
Subject: CoA (Bounce) not working on HP 2620 switches

Hello

I have a problem with HP2620 POE switches which do not accept CoA (bounce). The configuration in CPPM is good because other AOS switches are working fine! I have already brought the switch to the latest possible firmware "RA16.04.0028".

Within ClearPass I get the message "Unsupported attribute"

Are these 2620 switches too old for this?

I see that in similar issues on this topic often is asked if a VIP IP address is used.

In this case, I am also using a VIP.

What could be or is the problem?

Hi Gorazd,

Thanks for your help this far!

I've contacted TAC, but they do not support the devices anymore...

I don't know if there is a way that I can use to debug/analyze the switch and which can be used to figure out the correct attributes.

Jan

Hi Jan.

:-( I'm still puzzled why standard bounce attribute is not recognized with 16.04 as FW version is relatively recent.

Hopefully you'll get somebody from TAC to provide you with correct attributes. There is nothing in docs regarding COA attributes for 2620.

Best, Gorazd

Hi Gorazd,

Unfortunately still no success!

I've asked HP support what radius attributes the HP2620 accepts!

Regards,

Jan

Hi Jan.

Yeah, I was afraid of that. Didn't have time to test it. 

Try with the following enforcement profile

In quick search I couldn't find what specific RADIUS attributes are supported on 2620.

Best, Gorazd

------------------------------
Gorazd Kikelj
MVP Guru 2025

Original Message:
Sent: Jun 02, 2025 03:47 AM
From: JanPultrum
Subject: CoA (Bounce) not working on HP 2620 switches

Hello Goradzd,

Thanks for your response. I tried to modify the existing template with your suggestions. I think the Attribute "BOUNCE_PORT" is not correct, because I get an error message when importing.

Original Message:
Sent: May 29, 2025 04:06 AM
From: GorazdKikelj
Subject: CoA (Bounce) not working on HP 2620 switches

I believe you should create a new RADIUS Dynamic Authorization Template for 2620 with correct attribute.

Export standard ArubaOS - Bounce Switch Port entry and modify it with correct values. 

Untested as I don't have any 26xx available. 

------------------------------
Gorazd Kikelj
MVP Guru 2025

Original Message:
Sent: May 28, 2025 07:28 AM
From: JanPultrum
Subject: CoA (Bounce) not working on HP 2620 switches

Hello Shpat,

Earlier you mentioned, "I think you need to add Vendor-Specific = "HP,255 = 'BOUNCE_PORT'"

I tried editing the original HP radius template and adding your suggestion and then importing it back again, but that didn't succeed. I get an error everytime saying that the XML file is not valid...

Also, you mentioned the ID:255, but that one is already in the existing Radius template.

I have never added an extra line to an existing template or imported a completely new template.

I searched the Internet for Port bounce attributes for an HP2620 switch but I cannot find it.  However, I did find an alternative way for adding VSA for port bounce:

Only I don't have the option "RADIUS Vendors", and can only use import/export.

Any help would be appreciated!

Regards,

Jan

Original Message:
Sent: May 21, 2025 11:24 AM
From: shpat
Subject: CoA (Bounce) not working on HP 2620 switches

You need to create a new dictionary and check the mandatory AVP Pairs necessary to perform VLAN Change or Port Bounce.
Then when you add the Device in ClearPass, you choose that specific template for that device.

------------------------------
Shpat | ACEP | ACMP | ACCP | ACDP
Just an Aruba enthusiast and contributor by cases
If you find my comment helpful, KUDOS are appreciated.

Original Message:
Sent: May 21, 2025 09:16 AM
From: JanPultrum
Subject: CoA (Bounce) not working on HP 2620 switches

Hello Shpat

Thanks for you reply!

Can you tell me where I do need to add those Vendor-Specific values?

Is this in Radius Dynamic Auth Templates?

Also I created a HP 2620 specific Enforcement profile with some added information which I found in the discussion forum for 2920 Switches.

But that was not the solution!

Original Message:
Sent: May 21, 2025 06:57 AM
From: shpat
Subject: CoA (Bounce) not working on HP 2620 switches

You are sending a Bounce Message which the 2620 is not understanding (is not in the attribute library) and that is the reason why you see this message.

I think you need to add Vendor-Specific = "HP,255 = 'BOUNCE_PORT'"  because that is the correct message that it is expecting for it to work

------------------------------
Shpat | ACEP | ACMP | ACCP | ACDP
Just an Aruba enthusiast and contributor by cases
If you find my comment helpful, KUDOS are appreciated.

Original Message:
Sent: May 20, 2025 08:28 AM
From: JanPultrum
Subject: CoA (Bounce) not working on HP 2620 switches

Hello

I have a problem with HP2620 POE switches which do not accept CoA (bounce). The configuration in CPPM is good because other AOS switches are working fine! I have already brought the switch to the latest possible firmware "RA16.04.0028".

Within ClearPass I get the message "Unsupported attribute"

Are these 2620 switches too old for this?

I see that in similar issues on this topic often is asked if a VIP IP address is used.

In this case, I am also using a VIP.

What could be or is the problem?

I would play with custom CoA profile and try to find attribute that work. Unfortunately it will take time to do it. 

Try to find FreeRadius or other radius dictionaries from years back. I did look into FreeRadius and HP dictionary is mostly the same.

Best, Gorazd

Hi Gorazd,

Thanks for your help this far!

I've contacted TAC, but they do not support the devices anymore...

I don't know if there is a way that I can use to debug/analyze the switch and which can be used to figure out the correct attributes.

Jan

Hi Jan.

:-( I'm still puzzled why standard bounce attribute is not recognized with 16.04 as FW version is relatively recent.

Hopefully you'll get somebody from TAC to provide you with correct attributes. There is nothing in docs regarding COA attributes for 2620.

Best, Gorazd

Hi Gorazd,

Unfortunately still no success!

I've asked HP support what radius attributes the HP2620 accepts!

Regards,

Jan

Hi Jan.

Yeah, I was afraid of that. Didn't have time to test it. 

Try with the following enforcement profile

In quick search I couldn't find what specific RADIUS attributes are supported on 2620.

Best, Gorazd

------------------------------
Gorazd Kikelj
MVP Guru 2025

Original Message:
Sent: Jun 02, 2025 03:47 AM
From: JanPultrum
Subject: CoA (Bounce) not working on HP 2620 switches

Hello Goradzd,

Thanks for your response. I tried to modify the existing template with your suggestions. I think the Attribute "BOUNCE_PORT" is not correct, because I get an error message when importing.

Original Message:
Sent: May 29, 2025 04:06 AM
From: GorazdKikelj
Subject: CoA (Bounce) not working on HP 2620 switches

I believe you should create a new RADIUS Dynamic Authorization Template for 2620 with correct attribute.

Export standard ArubaOS - Bounce Switch Port entry and modify it with correct values. 

Untested as I don't have any 26xx available. 

------------------------------
Gorazd Kikelj
MVP Guru 2025

Original Message:
Sent: May 28, 2025 07:28 AM
From: JanPultrum
Subject: CoA (Bounce) not working on HP 2620 switches

Hello Shpat,

Earlier you mentioned, "I think you need to add Vendor-Specific = "HP,255 = 'BOUNCE_PORT'"

I tried editing the original HP radius template and adding your suggestion and then importing it back again, but that didn't succeed. I get an error everytime saying that the XML file is not valid...

Also, you mentioned the ID:255, but that one is already in the existing Radius template.

I have never added an extra line to an existing template or imported a completely new template.

I searched the Internet for Port bounce attributes for an HP2620 switch but I cannot find it.  However, I did find an alternative way for adding VSA for port bounce:

Only I don't have the option "RADIUS Vendors", and can only use import/export.

Any help would be appreciated!

Regards,

Jan

Original Message:
Sent: May 21, 2025 11:24 AM
From: shpat
Subject: CoA (Bounce) not working on HP 2620 switches

You need to create a new dictionary and check the mandatory AVP Pairs necessary to perform VLAN Change or Port Bounce.
Then when you add the Device in ClearPass, you choose that specific template for that device.

------------------------------
Shpat | ACEP | ACMP | ACCP | ACDP
Just an Aruba enthusiast and contributor by cases
If you find my comment helpful, KUDOS are appreciated.

Original Message:
Sent: May 21, 2025 09:16 AM
From: JanPultrum
Subject: CoA (Bounce) not working on HP 2620 switches

Hello Shpat

Thanks for you reply!

Can you tell me where I do need to add those Vendor-Specific values?

Is this in Radius Dynamic Auth Templates?

Also I created a HP 2620 specific Enforcement profile with some added information which I found in the discussion forum for 2920 Switches.

But that was not the solution!

Original Message:
Sent: May 21, 2025 06:57 AM
From: shpat
Subject: CoA (Bounce) not working on HP 2620 switches

You are sending a Bounce Message which the 2620 is not understanding (is not in the attribute library) and that is the reason why you see this message.

I think you need to add Vendor-Specific = "HP,255 = 'BOUNCE_PORT'"  because that is the correct message that it is expecting for it to work

------------------------------
Shpat | ACEP | ACMP | ACCP | ACDP
Just an Aruba enthusiast and contributor by cases
If you find my comment helpful, KUDOS are appreciated.

Original Message:
Sent: May 20, 2025 08:28 AM
From: JanPultrum
Subject: CoA (Bounce) not working on HP 2620 switches

Hello

I have a problem with HP2620 POE switches which do not accept CoA (bounce). The configuration in CPPM is good because other AOS switches are working fine! I have already brought the switch to the latest possible firmware "RA16.04.0028".

Within ClearPass I get the message "Unsupported attribute"

Are these 2620 switches too old for this?

I see that in similar issues on this topic often is asked if a VIP IP address is used.

In this case, I am also using a VIP.

What could be or is the problem?