FortiNAC Disconnect Message Session context not found

[Jucker]

Hello,

I am facing an issue on DM after Guest self registration on a port used with dot1x the vlan never get changed.

The capture of Disconnect-Request :

The Disconnect-NAK : 

After shut no shut the port, the correct vlan get applied, do i need to apply cli configuration with port bounce as a workaround ? any other options ?

@ebilcari 

Thank you

Regards!

[ebilcari · Accepted solution]

It looks like the switch is refusing it beacuse it doesn't find a current session  for that MAC address. Maybe it doesn't like the format of the MAC address (dashed). You can try sending a manual CoA from FNAC CLI with the command:

> sendcoa -ip x.x.x.x -mac YY:YY:YY:YY:YY:YY -dis

while the host is authenticated, put the switch IP and the MAC address of this host in colon format.
What is the switch model and have you tried upgrading its firmware?

[ebilcari · Accepted solution]

It looks like the switch is refusing it beacuse it doesn't find a current session  for that MAC address. Maybe it doesn't like the format of the MAC address (dashed). You can try sending a manual CoA from FNAC CLI with the command:

> sendcoa -ip x.x.x.x -mac YY:YY:YY:YY:YY:YY -dis

while the host is authenticated, put the switch IP and the MAC address of this host in colon format.
What is the switch model and have you tried upgrading its firmware?

[Jucker · Accepted solution]

@ebilcari Thank you for your reply, it seems that switch  doesn't accept that mac format, since it is mab i used CLI configuration to bounce the port.

Thank you