Security

 View Only
  • 1.  REST action for disconnect fails on 2930M (ActiveSessionDisconnect) .

    Posted Jul 01, 2019 04:26 AM

    Hi,

    It seemsi have a problem with disconnecting active sessions on Aruba Switches.

    The same method works great for some time on my Comware 7 switches.

     

    The output from the API suggests the problem is the action beeing sent to the switch :

    {

       "result":    {

          "error": 1,

          "message": "{\"content\": {\"cnc_actions\": [{\"status_message\": \"Radius [ArubaOS Wireless - Terminate Session] failed for client 6c0b84e3cbcf\", \"id\": 1}]}, \"id\": \"R009b65c5-01-5d18549d,R009c8bfb-01-5d199e7b\", \"name\": \"cnc_response\"}"

       },

       "type": "http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html",

       "title": "Bad Request",

       "status": 400,

       "detail": "Error disconnecting session for user host/W4798.ozar.main. Please check ClearPass Policy Manager > Monitoring > Live Monitoring > Access Tracker for more details."

    }

    I have no control on the action the CCPM choose for disconnecting this client.

    The authenticated device itself (where the session is coming from) is configured as HPE.

    Any suggestions?



  • 2.  RE: REST action for disconnect fails on 2930M (ActiveSessionDisconnect) .

    Posted Jul 01, 2019 09:58 AM
    Please post a screenshot of the summary screen for the access tracker request.


  • 3.  RE: REST action for disconnect fails on 2930M (ActiveSessionDisconnect) .

    Posted Jul 01, 2019 04:49 PM

    EDIT: I Found the problem, It seems this spesific device was configured as Aruba instad of HPE.

    Sorry too much copy & paste lately...

     

    summary:

    Sum.PNG

    And CoA tab:

    Capture.PNG

    As i said Device is configured as Hewlett-Packard-Enterprise.

     

     

     

     

     



  • 4.  RE: REST action for disconnect fails on 2930M (ActiveSessionDisconnect) .
    Best Answer

    Posted Jul 01, 2019 04:52 PM
    The screenshot shows it is configured for Aruba, not Hewlett-Packard-Enterprise.