Problem Description
The on-site AC model is WX5840X, and the current version is R5478. It uses third parties server for portal authentication. The main issue is that after the version upgrade to R5478, forcing users offline via DM packets was unsuccessful. The pre-upgrade version is uncertain on site.
Process Analysis
1、First, acknowledge whether there are any changes to the AC configuration or third parties server after the AC upgrade. Check the AC configuration, which shows normal portal settings without any abnormalities. Inquiry with the third parties server also confirms no changes were made, and the on-site team reported that the对接bras device can still successfully force portal users offline via DM.
2、Compare the radius packets from other sites where wireless AC successfully forced users offline via DM:
Successful cases are as follows:
Faulty cases are as follows:
It can be observed that the attribute format of the Disconnect-Request packet for the failed case is incorrect compared to the successful RADIUS, and it carries 2 fewer attributes. Therefore, it is suspected that the issue is caused by either the attribute format or the missing attributes.
3、The on-site configuration is recommended as follows. Configuration explanation: attribute translate refers to enabling the radius attribute interpretation function; attribute reject Called-Station-Id received means the device does not process the Called-Station-Id attribute when receiving radius server packets; similarly, attribute reject Calling-Station-Id received means the device does not process the Calling-Station-Id attribute when receiving radius server packets.
radius dynamic-author server
attribute translate
attribute reject Called-Station-Id received
attribute reject Calling-Station-Id received
After applying the above command in the on-site configuration, DM forces users offline normally.
Solution
Configure under DAE server:
radius dynamic-author server
attribute translate
attribute reject Called-Station-Id received
attribute reject Calling-Station-Id received