We have observed a strange issue in our network. For any reason(change in profile) when Cisco ISE send a COA and ask to reauthenticate to an connected client on wireless controller client session is interrupted. Client tries to reconnect and we see client connection is disrupted. If we see ISE logs for one of the such client, 1st event log says "Dynamic authorization succeeded" , in next "Authentication succeeded", in third event "Dynamic Authorization failed" and in 4th event "Dynamic Authorization succeeded" in 5th "Authentication succeeded"
It is EAP-TLS authentication and only Machine authentication is being performed. This is a Win11 machine and has WIFI profile managed from Intune.
For us it looks WLC is not able to reauthenticate the client gracefully or Client it self does not handle reauthentication nicely.
Anyone else here has this kind of observations ? Is COA expected to be disruptive specially for Wireless clients ?
