Reset Search
 

 

Article

Various RFC3576 RADIUS messages from the Wireless appliance appear in NAC under 'Alert'

« Go Back

Information

 
TitleVarious RFC3576 RADIUS messages from the Wireless appliance appear in NAC under 'Alert'
Question
  • Various RFC3576 RADIUS messages from the Wireless appliance appear in NAC under 'Alert'.unknown response type"
  • NAC reporting CoA NAC from the controller with "
Environment
  • IdentiFi Wireless Controller
  • NAC/Netsight version 6.2
  • Wireless firmware 9.15.04
Answer
  1. UNSUPPORTED_ATTRIBUTE 401
    • For CoA or DM message includes unsupported attributes, such as SERVICE_TYPE, NAS_FILTER_RULE
      • Resolution: Informational - NAC is sending CoA or DM which should not include following attributes: SERVICE_TYPE, NAS_FILTER_RULE
 
  1. MISSING_ATTRIBUTE 402
    • For CoA from NAC, message is missing mandatory attribute, such as MAC, policy etc.
      • Resolution: This indicates an incorrect configuration. The administrator should add the missing MAC or Policy attribute.
 
  1. INVALID_ATTRIBUTE_VALUE 407
    • For CoA from NAC, policy is invalid.
      • Resolution: Wrong policy sent. Investigate the NAC Policy configuration.
 
  1. ADMINISTRATIVELY_PROHIBITED 501
    • For CoA request from NAC, duplicate message.
      • Resolution: Duplicate CoA sent before the previous was processed.  It can be ignored unless it happens often, in which case, more investigation is needed to determine the cause.  (possible reasons, but not limited too, are:  network time incorrect, network latency, network loop, packet duplication, configuration error etc)
 
  1. SESSION_CONTEXT_NOT_FOUND 503
    • Disconnect Message from NAC, if it is a duplicate message with a different ID or the client session is no longer on the controller the COA is sent to. 
      • Resolution: Contact GTAC, NAC investigation needed.
 
  1. RESOURCES_UNAVAILABLE 506
    • Resolution: Contact GTAC if excessive.
  1. UNEXPECTED RESPONSE TYPE
    • Wireless Controller is sending RFC 3576 NAK packets to the NAC appliance that does not include an "Error-Cause" attribute
      • Currently under investigation. Contact GTAC and reference this article
Additional notes
CoA= Change of Authorization

Feedback

 

Was this article helpful?


   

Feedback

Please tell us how we can make this article more useful.

Characters Remaining: 255