Security

Reply
Highlighted
New Contributor

CoA Disconnect - ClearPass / Meraki

Hello,

Currently, we have some trouble trying to configure CoA disconnect message between our Radius Architecture (Aruba Clearpass) and Meraki.

Aruba Clearpass send its CoA Disconnect message, but Meraki don't accept it. 
It seems that the Meraki access point is unable to interpret and forward this CoA frame sent by Clearpass.

Here are the attributes created in Clearpass.

- Radius:IETF Calling-Station-Id = %{Radius:IETF:Calling-Station-Id}
- Radius:IETF Acct-Session-Id = %{Radius:IETF:Acct-Session-Id}
- Radius:IETF Event-Timestamp = %{Radius:IETF:Event-Timestamp

- Radius:Cisco Cisco-AVPair = %{Radius:Cisco:audit-session-Id}




The CoA and accounting are enabled on the both side.


Do you have any ideas to solve this issue ? or workaround ?

 

Thank you so much

Highlighted
MVP Expert

Re: CoA Disconnect - ClearPass / Meraki

Is the clock correct on both ends?



Thank you

Victor Fabian

Pardon typos sent from Mobile
Thank you

Victor Fabian
Lead Mobility Architect @WEI
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Highlighted
Moderator

Re: CoA Disconnect - ClearPass / Meraki

https://github.com/aruba/clearpass-radius-dynamic-authorization-templates/



If this response is more than 1 year old, it may no longer be accurate. Please consult official Aruba documentation, TAC or your Aruba SE.

| Aruba Alumni | @timcappalli | timcappalli.me |

Highlighted
New Contributor

Re: CoA Disconnect - ClearPass / Meraki

Hello Victor and Capalli,

 

Thank you for your anwsers,

 

@Victor → Yes I just checked, the clock is correct on the both side.

@Capalli → I followed well your CoA Template and unfortunately still not working...

Capture.PNG

 

Capture2.PNG

 

Highlighted
Occasional Contributor I

Re: CoA Disconnect - ClearPass / Meraki

Good day Tim,

Do you maybe have a Template for Ruckus AP's as well?

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: