Security

Hello,

Currently, we have some trouble trying to configure CoA disconnect message between our Radius Architecture (Aruba Clearpass) and Meraki.

Aruba Clearpass send its CoA Disconnect message, but Meraki don't accept it. 
It seems that the Meraki access point is unable to interpret and forward this CoA frame sent by Clearpass.

Here are the attributes created in Clearpass.

- Radius:IETF Calling-Station-Id = %{Radius:IETF:Calling-Station-Id}
- Radius:IETF Acct-Session-Id = %{Radius:IETF:Acct-Session-Id}
- Radius:IETF Event-Timestamp = %{Radius:IETF:Event-Timestamp

- Radius:Cisco Cisco-AVPair = %{Radius:Cisco:audit-session-Id}

The CoA and accounting are enabled on the both side.

Do you have any ideas to solve this issue ? or workaround ?

Thank you so much

https://github.com/aruba/clearpass-radius-dynamic-authorization-templates/

Good day Tim,

Do you maybe have a Template for Ruckus AP's as well?

Hello Victor and Capalli,

Thank you for your anwsers,

@Victor → Yes I just checked, the clock is correct on the both side.

@Capalli → I followed well your CoA Template and unfortunately still not working...