Nac Accept State

  • 0
  • 1
  • Question
  • Updated 3 years ago
  • Answered
In our NAC version 6.3.0.162 integrated with IdentiFi platform version 9.21.04  we can see end-systems in the Accept State even if their last seen date it's equal to a month ago.
The ES State changes only if the NAC receives accounting packet? Is it possible modify the accept in disconnected status?
Photo of Michele de Varda

Michele de Varda

  • 130 Points 100 badge 2x thumb

Posted 3 years ago

  • 0
  • 1
Photo of Tyler Marcotte

Tyler Marcotte, Official Rep

  • 2,784 Points 2k badge 2x thumb
Hi Michele,

In order to have the Disconnected state shown, you need to ensure that RADIUS Accounting is enabled within NAC and on the wireless controller. I believe this is disabled by default in NAC, but can be enabled by editing the switch and selecting enabled. Also make sure that on the WLAN service under Auth & Acct. that the NAC appliance is selected for Accounting.





-Tyler
Photo of Michele de Varda

Michele de Varda

  • 130 Points 100 badge 2x thumb
We recently added 2 new wireless controllers and we forget to enable the accounting in the NAC configuration.
Thank you Tyler for your precious support!
Photo of Drew C.

Drew C., Community Manager

  • 40,166 Points 20k badge 2x thumb
Hi Michele,
Welcome to The Hub.  I'm glad Tyler was able to help you out quickly!
Photo of Michele de Varda

Michele de Varda

  • 130 Points 100 badge 2x thumb
We enabled accounting in the NAC conf for the 2 new wireless controllers (C5210 model FW 9.21.04) but the issue with the update of the ES state didn't solve. When I try to disconnect a client from a Wi-Fi network  or to turn off the wireless network card I see the client still in the state of accept. Is it a normal behaviour?
We have 7800 client in ACCEPT state even if their LAST_SEEN_TIME is equal to yesterday and "only" 4700 clients are in  the DISCONNECTED state. In the wireless controllers the accounting seems correctly configured: we have the distribuited ES cache enabled and 4 NACs in balancing mode that receive the accounting from the 2 EWCs.