cancel
Showing results for 
Search instead for 
Did you mean: 

Wireless client registering to NAC and flipping VLAN is slow to get new IP address causing delay in registration process

Wireless client registering to NAC and flipping VLAN is slow to get new IP address causing delay in registration process

Lane_Messer
New Contributor II

Hello! 

We are using Extreme Management Center 8.4, V2110 Medium 10.41, Extreme Networks Access Control Engine 8.4, and VMWare 6.5. 

 

For whatever reason, when a client connects to the captive portal and signs in correctly. It will stay there for 5 or 10 minutes unless we force authentication on Management Center. Of course, they get in the quarantine vlan which is 172.x.x.x, but once forced, they get into the correct vlan 10.x.x.x. 


Not really sure what’s going on. I can’t follow the last solution in the article that includes the same title, because I cannot find that in Management Center.

1 ACCEPTED SOLUTION

Lane_Messer
New Contributor II

Hello, thank you so much for your help. However, the java error that was posted is an issue in version 8.4 of Extreme Networks Access Control. 

 

[com.enterasys.tesNb.server.snmp.reauthentication.DisconnectMessageReauthenticationWorker] (Reauthentication Service Thread19:) Unable to update the authorization level for MAC: 00-1E-4C-9A-CB-47, IP: 172.16.222.64 because of exception:java.lang.NullPointerException 

 

The cause of the issue is due to changing re-authentication on the Access Controller. 

The unofficial workaround is to enforce using Java NAC Manager. However, that doesn’t fix the issue. 


Upgrading both Extreme Networks Management Center and Extreme Networks Access Control to 8.5 corrected the issue entirely. 

View solution in original post

15 REPLIES 15

StephanH
Valued Contributor III

Hello Lane,

 

can you post your quarantine rule? When shouled devices go to the quarantine rule and network?

If I understand you correct, the unregistered vlan and the internet vlan is the same, correct?

 

 

Regards Stephan

Brian_Anderson1
Contributor

Just giving you my experience.  I’ve done all you have done and still no joy.  Apple for some reason doesn’t accept the disassociate packet that it is sent, and never releases its hold on the wireless signal so that it can associate and obtain the new ip address.  Not sure what devices you have tested with, but for me Android and Windows works well, Apple doesn’t.

Lane_Messer
New Contributor II

Still doesn’t really help. 

What is weird is if I go into the V2110 and find the client, disassociate it, it will automatically connect (providing I enter the right credentials in the captive portal first.) 

Brian_Anderson1
Contributor

I try to avoid flipping vlans on wireless, it just doesn’t consistently work well, especially for Apple devices.  

Lane_Messer
New Contributor II

If I disassociate in the V2110, they automatically get connected. 

GTM-P2G8KFN