06-19-2022 04:20 AM
I have a fabric connect with ztp+ for fabric attach and standalone dhcp derver and Ldap server for auth. , switches go through ztp+ smoothly , I have applied dynamic policy with 4 dynamic vlan (staging, 51, 52, 53) applied automatic , user go through registration via captive portal going through staging vlan first and get ip address, after registration the user's vlan gets changed from staging but the ipaddress doesnt change to the new vlan which makes the user stuck in the authentication at the captive portal. when i open cmd on the user's pc and type "ipconfig /release and /renew" the user gets the new ip and gets authenticated successfully
how do i fix this problem?
06-22-2022 08:08 AM
06-22-2022 04:33 AM
06-20-2022 08:09 AM
There should be a reauthentication request that occurs on registration to change the role.
This could be done by RFC 3576/5176 CoA/DM, toggle link, or possibly an SNMP set. It depends on which Control solution is in play and what the switch supports.
With ZTP+ I'm assuming you have either EXOS/VSP switches that you're working with. It would then depend on if the reauthentication method that is being used is causing a toggle link or link bounce in order to get the DHCP services to initialize on the end system.
With EXOS I don't believe a link bounce is supported (yet).
What type of switch and which control solution are you working with?
Thanks
-Ryan