topic CoA Session Query and invalid signature (err=2)! in Network Access Control https://community.cisco.com/t5/network-access-control/coa-session-query-and-invalid-signature-err-2/m-p/1814076#M218497 <HTML><HEAD></HEAD><BODY><P>This seems to be a known bug and the work aroud is to add radius-server attribute 4 <IP address=""> in the config.</IP></P></BODY></HTML> Mon, 23 Jan 2012 22:10:26 GMT kirancisco 2012-01-23T22:10:26Z CoA Session Query and invalid signature (err=2)! https://community.cisco.com/t5/network-access-control/coa-session-query-and-invalid-signature-err-2/m-p/1814073#M218413 <OL><LI>When the portal/radius client sends a CoA-Req (session query); the ISG responds with a CoA-ACK however the portal receives an error message stating&nbsp;&nbsp; “rad_verify: Received CoA-ACK packet from client 172.X.X.X port 3799 with invalid signature (err=2)!&nbsp; (Shared secret is incorrect.)</LI><LI>The same happens when the a CoA-Re (session query) is sent from the Radius Client with an invalid/non-existing portbundle number.</LI></OL><P>We were expecting an ACK in the first and a NAK in the second case! </P><P></P><P>Did any one see this before? Please provide inputs if any?</P><P></P><P>Thanks! </P> Mon, 11 Mar 2019 01:33:32 GMT https://community.cisco.com/t5/network-access-control/coa-session-query-and-invalid-signature-err-2/m-p/1814073#M218413 kirancisco 2019-03-11T01:33:32Z CoA Session Query and invalid signature (err=2)! https://community.cisco.com/t5/network-access-control/coa-session-query-and-invalid-signature-err-2/m-p/1814074#M218419 <HTML><HEAD></HEAD><BODY><P>Please open a TAC case to have this issue looked at.</P></BODY></HTML> Wed, 16 Nov 2011 23:49:02 GMT https://community.cisco.com/t5/network-access-control/coa-session-query-and-invalid-signature-err-2/m-p/1814074#M218419 Tarik Admani 2011-11-16T23:49:02Z CoA Session Query and invalid signature (err=2)! https://community.cisco.com/t5/network-access-control/coa-session-query-and-invalid-signature-err-2/m-p/1814075#M218457 <HTML><HEAD></HEAD><BODY><P>Thank You Admani, I have already done that but just wanted to know if anyone else noticed the same and have a solution if any?</P></BODY></HTML> Thu, 17 Nov 2011 03:33:23 GMT https://community.cisco.com/t5/network-access-control/coa-session-query-and-invalid-signature-err-2/m-p/1814075#M218457 kirancisco 2011-11-17T03:33:23Z CoA Session Query and invalid signature (err=2)! https://community.cisco.com/t5/network-access-control/coa-session-query-and-invalid-signature-err-2/m-p/1814076#M218497 <HTML><HEAD></HEAD><BODY><P>This seems to be a known bug and the work aroud is to add radius-server attribute 4 <IP address=""> in the config.</IP></P></BODY></HTML> Mon, 23 Jan 2012 22:10:26 GMT https://community.cisco.com/t5/network-access-control/coa-session-query-and-invalid-signature-err-2/m-p/1814076#M218497 kirancisco 2012-01-23T22:10:26Z