I needed to change vlan to guest too, but I couldn't with Disconnect, COA termination session and bounce port. In fact for mobile device it worked, but not for Windows. I found an alternative.
In the MC/MD controller environment I created a bogus vlan and this vlan does not have DHCP or IP on the interface. I left her on Guest's ssid service. I created rules of "User Rules" is in:
Configuration > Authentication > User Rules
after this,
Configuration > Authentication > AAA Profiles > profile of your guest > "User derivation rules:"
the rule is to change vlan, in my case it's based on "location" = AP name.
This vlan delivered by the rule "user rules" it has IP on the interface and DHCP for the user for the page guest to happen.
With that we have the change of vlan before authentication and the user is already in it until the end.
------------------------------
Herbert Ferreira
------------------------------
Original Message:
Sent: Feb 15, 2019 11:29 AM
From: Tim Cappalli
Subject: Guest wireless with CoA to put user in different VLAN
If you're changing VLANs, you need to use a Disconnect, not a CoA.