WLC retain previous SSID connection, while in ISE & enduser shows user connected to new SSID

[Shazni Ibrahim]

So we have newly deployed ISE in our environment. 

We have new and old SSID. New SSID is using ISE.

Problem description:

From ISE logs, the user already allowed network access and is connected to new SSID.

But for some reason, the user doesn't seem to have network/internet access.

When I check inside WLC, the user seems still connected to the old SSID.

Action taken:

So what I did was, I remove the user endpoint from WLC.

After that, reconnect back to the new SSID, and confirmed in WLC it is connected to the new SSID. 

Question:

From ISE point of view, it did send the CoA and give access to the enduser, but from WLC it seems like the enduser still retaining the previous session (with old SSID).

What was happening actually as I can't quite figure out why WLC still retaining the previous session, while the user is already connected to another SSID.

Thanks in advance.

[hslai]

I've not seen something like this, but it looks like an issue on the WLC. Try recreating it with a client and using debug commands (e.g. debug client mac ...) on WLC to collect the info on the particular endpoint. If needed, open a TAC case to troubleshoot further.

[hslai · Accepted solution]

Please avoid posting the same questions at multiple forums. I found you posted the same at WLC retain previous SSID connection, wh.... As Jason wrote, it could be a bug related to Fast SSID switching.