Security

 View Only

  • 1.  CoA Disconnect - ClearPass / Meraki

    Posted Mar 12, 2020 10:15 AM

    Hello,

    Currently, we have some trouble trying to configure CoA disconnect message between our Radius Architecture (Aruba Clearpass) and Meraki.

    Aruba Clearpass send its CoA Disconnect message, but Meraki don't accept it. 
    It seems that the Meraki access point is unable to interpret and forward this CoA frame sent by Clearpass.

    Here are the attributes created in Clearpass.

    - Radius:IETF Calling-Station-Id = %{Radius:IETF:Calling-Station-Id}
    - Radius:IETF Acct-Session-Id = %{Radius:IETF:Acct-Session-Id}
    - Radius:IETF Event-Timestamp = %{Radius:IETF:Event-Timestamp

    - Radius:Cisco Cisco-AVPair = %{Radius:Cisco:audit-session-Id}




    The CoA and accounting are enabled on the both side.


    Do you have any ideas to solve this issue ? or workaround ?

     

    Thank you so much



  • 2.  RE: CoA Disconnect - ClearPass / Meraki

    Posted Mar 12, 2020 10:30 AM
    Is the clock correct on both ends?



    Thank you

    Victor Fabian

    Pardon typos sent from Mobile


  • 3.  RE: CoA Disconnect - ClearPass / Meraki



  • 4.  RE: CoA Disconnect - ClearPass / Meraki

    Posted May 27, 2020 04:22 AM

    Good day Tim,

    Do you maybe have a Template for Ruckus AP's as well?



  • 5.  RE: CoA Disconnect - ClearPass / Meraki

    Posted Mar 12, 2020 11:21 AM

    Hello Victor and Capalli,

     

    Thank you for your anwsers,

     

    @Victor → Yes I just checked, the clock is correct on the both side.

    @Capalli → I followed well your CoA Template and unfortunately still not working...

     

    Capture.PNG

     

    Capture2.PNG

     

     



  • 6.  RE: CoA Disconnect - ClearPass / Meraki

    Posted Sep 18, 2025 09:02 AM

    I'm facing the same issue.  Were you able to find a resolution?

    -------------------------------------------

    Original Message


  • 7.  RE: CoA Disconnect - ClearPass / Meraki

    Posted Sep 18, 2025 11:51 PM

    please open a new discussion as this one is 5 years old.



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------

    Original Message


  • 8.  RE: CoA Disconnect - ClearPass / Meraki

    Posted Sep 19, 2025 09:00 AM

    As it turns out, for some as-yet unknown reason, removing the custom profile I created and using the [Cisco - Reauthenticate-Session] profile instead allows it to work.  I don't understand it, but I'll take the win and hope for clearer understanding in the future.

    -------------------------------------------

    Original Message


Related Content