CoA Session Query and invalid signature (err=2)!

[kirancisco]

1. When the portal/radius client sends a CoA-Req (session query); the ISG responds with a CoA-ACK however the portal receives an error message stating   “rad_verify: Received CoA-ACK packet from client 172.X.X.X port 3799 with invalid signature (err=2)!  (Shared secret is incorrect.)
2. The same happens when the a CoA-Re (session query) is sent from the Radius Client with an invalid/non-existing portbundle number.

We were expecting an ACK in the first and a NAK in the second case!

Did any one see this before? Please provide inputs if any?

Thanks!

[Tarik Admani]

Please open a TAC case to have this issue looked at.

[kirancisco]

Thank You Admani, I have already done that but just wanted to know if anyone else noticed the same and have a solution if any?

[kirancisco]

This seems to be a known bug and the work aroud is to add radius-server attribute 4 in the config.