Description
This article describes how to connect wireless clients are disconnected/de-authenticated from Cisco WLC controllers via SNMP OID bsnMobileStationDeleteAction.
There is currently a known issue where the C9800 model does not honor the SNMP method to disconnect.
Symptoms of this behavior include connected clients unable to switch VLANs after successful registration. If the client disconnects from the wireless and reconnects, the new VLAN is assigned.
For details, refer to Cisco Bug ID: CSCvv58252 "WLC 9800 Ignores Disconnect Request from RADIUS Server"
Scope
FortiNAC v8.6.2 and higher
Solution
Solution 1:
Cisco has indicated the issue is planned to be addressed in firmware version 17.5 of the C9800. Contact Cisco for details.
Solution 2:
- Upgrade the appliance to v8.7.2 or higher.
- Configure the appliance to use Change of Authentication (CoA) to disconnect clients (SNMP remains the default method). For instructions, refer to the Cisco Wireless Controller Integration reference manual in the Fortinet Document Library
Related document:
