NO CoA request

[ittechk4u1]

Hello experts,

I just configured wireless Guets access on WLC/ISE and getting the below error:

11213 No response received from Network Access Device after sending a Dynamic Authorization request

Here are my policies:

Authentication:

MAB : If    Wireless_MABAllow Protocols  :  Default Network Access  and  

Default

:

use

Internal Endpoints

Authorization:

Phase2-Redirect-Access if GuestType_ActivatedGuest-30D AND (Wireless_MAB AND Radius:Called-Station-ID CONTAINS GM_CWA AND Network Access:UseCase EQUALS Guest Flow ) then PermitAccess

Phase1-Redirect if (Wireless_MAB AND Airespace:Airespace-Wlan-Id EQUALS 4 ) then CWA_WebAuth

could anyone help to troubleshoot!!!

Thanks in advance:

[Rob Ingram]

Hi,
Have you configured "Support for RFC 3576" on the WLC?

Security > AAA > RADIUS > Authentication

This page shows how to enable

HTH

[ittechk4u1]

Yes its enabled. 

see the output , wlc dont see any CoA requests...

(99CWLAN1) >show radius rfc3576 statistics
RFC-3576 Servers:

Server Index..................................... 1
Server Address................................... 192.168.21.14
Disconnect-Requests.............................. 0
COA-Requests..................................... 0
Retransmitted Requests........................... 0
Malformed Requests............................... 0
Bad Authenticator Requests....................... 0
Other Drops...................................... 0
Sent Disconnect-Ack.............................. 0
Sent Disconnect-Nak.............................. 0
Sent CoA-Ack..................................... 0
Sent CoA-Nak..................................... 0

Thanks

[ittechk4u1 · Accepted solution]

Finally i resolved it. CoA Port 1700 was blcoked on firewall. Thanks