topic Re: ERS 35,36 trigger re-authentication in ExtremeSwitching (ERS)

ERS 35,36 trigger re-authentication

TobiasW — Tue, 09 Mar 2021 00:33:21 GMT

Hi guys,

can anyone help me with manual re-auth for Clients connected on ERS35 or 36?

I’m currently migrating NAC off Ignition towards Control, and I don’t really enjoy waiting until the re-auth timer passes and the switch sends an re-auth request to the new Radius Server (Control)…

“eap init re-authenticate” doesn’t work…

Has anyone an idea?

Thanks and BR

Tobias

Re: ERS 35,36 trigger re-authentication

Miguel-Angel_RO — Tue, 09 Mar 2021 20:13:09 GMT

Tobias,

Did you set in the NAC device the following setting for the re-auth:

Check here for the ERS template:

https://community.extremenetworks.com/extreme%2Dmanagement%2Dcenter%2D233228/ers%2D4800%2Dfa%2Disid%2Dvlan%2Dassignment%2Dwith%2Dnac%2D7830054

Mig

Re: ERS 35,36 trigger re-authentication

TobiasW — Tue, 09 Mar 2021 20:51:10 GMT

Hi Mig, thanks for the reply.

Yes, I use the displayed re-auth settings.

But I mean something else.

The customer has active NAC sessions on his ERS, the active Radius Server is Ignition. The Ports are configured to re-authenticate every 3500 seconds.

I am not allowed to disable and re-enable all the ports, so I’m only allowed to change the Radius settings and wait unitl the re-authentication timer triggers the switch to send new request to the Radius.

Therefore I am looking for a command that forces the ERS to re-authenticate the clients after I changed the Radius Server. I don’t want to wait those 3500 seconds…

I hope you can follow what I’m saying… 😉

Stay safe!

Tobias

Re: ERS 35,36 trigger re-authentication

Miguel-Angel_RO — Tue, 09 Mar 2021 21:40:41 GMT

Tobbias,

Did you configured the CoA in IDE?

I never tested it but you could maybe configure IDE as radius auth server and Control as CoA server as the settings for radius server and coa server are separate.

Mig

Re: ERS 35,36 trigger re-authentication

Miguel-Angel_RO — Tue, 09 Mar 2021 21:43:36 GMT

Tobbias,

Reading again your post, the solution is to configure the ERS with the template mentionned in the post above concerning the re-auth server.

Configure the re-auth behaviour in Control and send a re-authentication command per client.

Mig

Re: ERS 35,36 trigger re-authentication

TobiasW — Thu, 01 Apr 2021 13:16:29 GMT

Thanks for you answer, Mig !