Radius COA messages Fortiink FortiNAC

[diojanruiz]

Hi Friends,

We currently have a solution implemented with FortiNAC integrated with Fortigate and FortiSwitch through FortiLink. Change of Authorization (CoA) events are correctly configured in compliance with RFC 5176, and dynamic VLAN changes are working as expected. However, a specific behavior is observed when a host is deleted from the FortiNAC inventory: in this scenario, FortiNAC sends a Disconnect-Request, but this message is never acknowledged by the switch, even though CoA operations function correctly in other scenarios such as host state changes or VLAN reassignment.

Fortinac Version 7.6.3.0779 

Fortigate Version v7.4.9 

FortiSwitch Version 7.4.7

This is a capture when the client change from vlan register to vlan employee

This is a capture when I delete the host from FortiNAC GUI

Regards

[AEK]

Hi

A quite similar issue has been resolved in 7.6.5.

1188470

FortiNAC and FortiGate CoA Disconnect Request failed error code = 0.0.1.f7.

Ref:  https://docs.fortinet.com/document/fortinac-f/7.6.5/release-notes/306067/resolved-issues-version-f-7...

Hope it helps.