I removed the Role assignments for ssid-profile
and also i changed radreply attribute Filter-Id to Aruba-User-Role
Still the same result. I think the immediate Access-Challenge overwrites the coa-request on instant VC, is there a way to verify this on the VC log?
On VC Support Command: AP Log ALL, I can see that VC handle the stm_rfc3576_request and executes handle_disconnect_user. Does this explain the immediate Access-Challenge after the coa-request?
Jun 19 11:27:08 stm[3694]: stm: rfc3576 req 0 for a0:8d:16:9d:fb:2f:172.31.98.122 (role=) from:10.0.99.24
Jun 19 11:27:08 stm[3694]: stm stm_rfc3576_request, 230: wired flag for client a0:8d:16:9d:fb:2f is 0
Jun 19 11:27:08 stm[3694]: handle_disconnect_user: 10659: sci->mac_authenticate=0 sci->captive_portal=0 sta->dot1xctx=0x1fe33c
see log file attached.
Please let me know if you need further log.
regards,
Peter