Technical Tip: How to send CoA re-authentication request to Cisco WLC

In some circumstances, while Cisco WLC receives a CoA disconnect (RFC 5176) message, Cisco WLC disconnects the host; however, it does not send any new RADIUS authentication requests for the same host. In these circumstances, FortiNAC can be configured to send a CoA Re-Authentication request with the required RADIUS VSA.

1. Create a new RFC Attribute group under Network -> RADIUS -> Attribute Groups by using the Cisco RADIUS VSAs below. In addition to the Cisco VSAs shown below, add the 'Calling-Station-id' attribute as a session identifier that is required by Cisco.
   
   

Cisco:Avpair=“subscriber:command=reauthenticate”
Cisco:Avpair=“subscriber:reauthenticate-type=rerun”

2. Navigate to SSID configuration and change the RFC5176 Mode to Custom and select the RFC5176 Attribute Group for the newly created RFC Group.

3. Create a circumstance so that FortiNAC can send a CoA Disconnect message, like Guest Self-Registration, and test the CoA disconnect message.