PacketFence - BTS - PacketFence
View Issue Details
0001337PacketFence802.1xpublic2011-11-21 09:382012-04-19 11:27
bonald 
obilodeau 
normalminoralways
closedfixed 
3.0.2 
3.3.0 
0001337: SNMP deauth not working on WLC v7
I have a 2125 and a 4402.

SNMP deauth is not working. Client needs to disconnect manually.
I am now using CLI deauth and it's working fine.
Added some code to WLC4400.pm

$session->cmd("config client deauthenticate $mac");
No tags attached.
Issue History
2011-11-21 09:38bonaldNew Issue
2011-11-21 09:50obilodeauStatusnew => assigned
2011-11-21 09:50obilodeauAssigned To => obilodeau
2011-11-21 09:52obilodeauNote Added: 0002451
2011-11-21 09:52obilodeauStatusassigned => feedback
2011-11-21 10:28bonaldNote Added: 0002452
2012-04-11 23:31obilodeauNote Added: 0002643
2012-04-11 23:31obilodeauStatusfeedback => assigned
2012-04-19 11:27obilodeauNote Added: 0002669
2012-04-19 11:27obilodeauStatusassigned => resolved
2012-04-19 11:27obilodeauFixed in Version => 3.3.0
2012-04-19 11:27obilodeauResolutionopen => fixed
2012-04-19 11:27obilodeauStatusresolved => closed

Notes
(0002451)
obilodeau   
2011-11-21 09:52   
We have seen the code work fine on the 44xx with the 7.x IOS. I would like some more information:
- Is this for MAC-Authentication or only 802.1X?
- What IOS are you running?
- Is there anything in the controllers' logs when attempting deauth?
(0002452)
bonald   
2011-11-21 10:28   
When doing "debug aaa event" on wlc I don't see anything about deauth.
This is for mac-auth.
IOS 7.0.116.0

802.1x seems fine ... is it using a different method ?
I tested a violation when using 802.1x and I get thrown into isolation vlan no problem...
(0002643)
obilodeau   
2012-04-11 23:31   
I completely got out of touch with this issue until I searched in the bug tracker for Cisco issues.. sorry..

Just wanted to say that we're implementing RADIUS Disconnect (RFC3576) to the Cisco product line and it seems to work with all Cisco's since IOS 5.

Check https://github.com/inverse-inc/packetfence/tree/feature/Cisco-Wireless-CoA [^]

Will be part of next release.
(0002669)
obilodeau   
2012-04-19 11:27   
3.3.0 released last Friday includes CoA support which should resolve your initial problem.

Note that there's an issue with it right now (0001426) but this will be fixed and a new release made either tomorrow or next week.