ERS 35,36 trigger re-authentication

[TobiasW]

Hi guys,

can anyone help me with manual re-auth for Clients connected on ERS35 or 36?

I’m currently migrating NAC off Ignition towards Control, and I don’t really enjoy waiting until the re-auth timer passes and the switch sends an re-auth request to the new Radius Server (Control)…

“eap init re-authenticate” doesn’t work…

Has anyone an idea?

Thanks and BR

Tobias

[TobiasW]

Thanks for you answer, Mig !

[Miguel-Angel_RO · Accepted solution]

Tobbias,

Reading again your post, the solution is to configure the ERS with the template mentionned in the post above concerning the re-auth server.

Configure the re-auth behaviour in Control and send a re-authentication command per client.

Mig

[Miguel-Angel_RO]

Tobbias,

Did you configured the CoA in IDE?

I never tested it but you could maybe configure IDE as radius auth server and Control as CoA server as the settings for radius server and coa server are separate.

Mig

[TobiasW]

Hi Mig, thanks for the reply.

Yes, I use the displayed re-auth settings.

But I mean something else.

The customer has active NAC sessions on his ERS, the active Radius Server is Ignition. The Ports are configured to re-authenticate every 3500 seconds.

I am not allowed to disable and re-enable all the ports, so I’m only allowed to change the Radius settings and wait unitl the re-authentication timer triggers the switch to send new request to the Radius.

Therefore I am looking for a command that forces the ERS to re-authenticate the clients after I changed the Radius Server. I don’t want to wait those 3500 seconds…

I hope you can follow what I’m saying… 😉

Stay safe!

Tobias