Re: Cisco ISE BYOD with vWLC - cisco-av-pair url redirect on vWLC

Sitita · ‎09-09-2018

I have use ISE 2.4 do BYOD with vWLC 8.2.100.0 version and I have use NSP_Onboard Authorization profile, Clients it doesn't get an ip address, So I have try create new Authorization profile in other name but it does the same then I have try to remove

cisco-av-pair = url-redirect-acl=ACL_WEBAUTH_REDIRECT
cisco-av-pair = url-redirect=https://192.168.1.234:port/portal/gateway?sessionId=SessionIdValue&portal=c35a4d10-b418-11e8-91a7-8e960e3c4a5a&action=nsp

It's working well

anyways in live logs is authentication successfully but clients just doesn't get an IP Address

I would like to know vWLC it's doesn't support for cisco-av-pair attributes?

Flavio Miranda · ‎09-10-2018

Hi

Usually in a web auth connection, client first get and IP address then they go to the web portal. It is different in comparison with 802.1x where first client get authenticated and then get an IP address.

In your situation, I believe at least you need to have AAA override ebm enabled on the WLAN and some Radius also require for an Mac filter applied on WLAN layer 2 security tab. You don't need actually populate the Mac filter but you need to apply.

But, again, for web auth, client must get IP when they start the connection.

-If I helped you somehow, please, rate it as useful.-

Sitita · ‎09-10-2018

Attributes Detail inside NSP_Onboard It had already ACCESS_ACCEPT then the client are allowed and should be able get an IP Address From DHCP and I use av-pair to override This is client

Access Type = ACCESS_ACCEPT
DACL = PERMIT_ALL_TRAFFIC
cisco-av-pair = url-redirect-acl=ACL_WEBAUTH_REDIRECT
cisco-av-pair = url-redirect=https://192.168.1.234:port/portal/gateway?sessionId=SessionIdValue&portal=406c93f0-2e02-11e8-ba71-005056872c7f&action=nsp

Sitita · ‎09-10-2018

I forget to tell something

If i do select ISE NAC on the NAC State, Client will not be able to get an IP Address, If I choose none Client will be able get an IP Address

And I Have debug aaa I found URL and ACL are send to client but I'm not sure did client get it through, Because when I use mobile connected but traffic not redirect

*radiusTransportThread: Sep 09 23:56:53.059: 00000000: 02 c1 02 5f cc a9 3a fe  b3 16 c5 2f d5 18 81 8d  ..._..:..../....
*radiusTransportThread: Sep 09 23:56:53.059: 00000010: 84 a1 80 33 01 08 73 69  74 69 74 61 18 28 52 65  ...3..sitita.(Re
*radiusTransportThread: Sep 09 23:56:53.059: 00000020: 61 75 74 68 53 65 73 73  69 6f 6e 3a 37 62 30 31  authSession:7b01
*radiusTransportThread: Sep 09 23:56:53.059: 00000030: 61 38 63 30 30 30 30 30  30 31 63 38 37 63 34 66  a8c0000001c87c4f
*radiusTransportThread: Sep 09 23:56:53.059: 00000040: 39 35 35 62 19 32 43 41  43 53 3a 37 62 30 31 61  955b.2CACS:7b01a
*radiusTransportThread: Sep 09 23:56:53.059: 00000050: 38 63 30 30 30 30 30 30  31 63 38 37 63 34 66 39  8c0000001c87c4f9
*radiusTransportThread: Sep 09 23:56:53.059: 00000060: 35 35 62 3a 69 73 65 2f  33 32 35 38 36 35 31 34  55b:ise/32586514
*radiusTransportThread: Sep 09 23:56:53.059: 00000070: 33 2f 31 32 35 34 4f 06  03 47 00 04 50 12 17 20  3/1254O..G..P...
*radiusTransportThread: Sep 09 23:56:53.059: 00000080: e8 06 71 73 62 ac d4 dc  f0 dd 28 62 80 ff 1a 2d  ..qsb.....(b...-
*radiusTransportThread: Sep 09 23:56:53.059: 00000090: 00 00 00 09 01 27 75 72  6c 2d 72 65 64 69 72 65  .....'url-redire
*radiusTransportThread: Sep 09 23:56:53.059: 000000a0: 63 74 2d 61 63 6c 3d 41  43 4c 5f 57 45 42 41 55  ct-acl=ACL_WEBAU
*radiusTransportThread: Sep 09 23:56:53.059: 000000b0: 54 48 5f 52 45 44 49 52  45 43 54 1a bf 00 00 00  TH_REDIRECT.....
*radiusTransportThread: Sep 09 23:56:53.059: 000000c0: 09 01 b9 75 72 6c 2d 72  65 64 69 72 65 63 74 3d  ...url-redirect=
*radiusTransportThread: Sep 09 23:56:53.059: 000000d0: 68 74 74 70 73 3a 2f 2f  31 39 32 2e 31 36 38 2e  https://192.168.
*radiusTransportThread: Sep 09 23:56:53.059: 000000e0: 31 2e 32 33 34 3a 38 34  34 33 2f 70 6f 72 74 61  1.234:8443/porta
*radiusTransportThread: Sep 09 23:56:53.059: 000000f0: 6c 2f 67 61 74 65 77 61  79 3f 73 65 73 73 69 6f  l/gateway?sessio
*radiusTransportThread: Sep 09 23:56:53.059: 00000100: 6e 49 64 3d 37 62 30 31  61 38 63 30 30 30 30 30  nId=7b01a8c00000
*radiusTransportThread: Sep 09 23:56:53.059: 00000110: 30 31 63 38 37 63 34 66  39 35 35 62 26 70 6f 72  01c87c4f955b&por
*radiusTransportThread: Sep 09 23:56:53.059: 00000120: 74 61 6c 3d 34 30 36 63  39 33 66 30 2d 32 65 30  tal=406c93f0-2e0
*radiusTransportThread: Sep 09 23:56:53.059: 00000130: 32 2d 31 31 65 38 2d 62  61 37 31 2d 30 30 35 30  2-11e8-ba71-0050
*radiusTransportThread: Sep 09 23:56:53.059: 00000140: 35 36 38 37 32 63 37 66  26 61 63 74 69 6f 6e 3d  56872c7f&action=
*radiusTransportThread: Sep 09 23:56:53.059: 00000150: 6e 73 70 26 74 6f 6b 65  6e 3d 37 34 37 33 64 37  nsp&token=7473d7
*radiusTransportThread: Sep 09 23:56:53.059: 00000160: 36 66 30 63 32 39 37 35  32 30 39 34 31 33 65 62  6f0c2975209413eb
*radiusTransportThread: Sep 09 23:56:53.059: 00000170: 38 65 62 36 39 32 65 39  33 39 1a 4b 00 00 00 09  8eb692e939.K....
*radiusTransportThread: Sep 09 23:56:53.059: 00000180: 01 45 41 43 53 3a 43 69  73 63 6f 53 65 63 75 72  .EACS:CiscoSecur
*radiusTransportThread: Sep 09 23:56:53.059: 00000190: 65 2d 44 65 66 69 6e 65  64 2d 41 43 4c 3d 23 41  e-Defined-ACL=#A
*radiusTransportThread: Sep 09 23:56:53.059: 000001a0: 43 53 41 43 4c 23 2d 49  50 2d 50 45 52 4d 49 54  CSACL#-IP-PERMIT
*radiusTransportThread: Sep 09 23:56:53.059: 000001b0: 5f 41 4c 4c 5f 54 52 41  46 46 49 43 2d 35 37 66  _ALL_TRAFFIC-57f
*radiusTransportThread: Sep 09 23:56:53.059: 000001c0: 36 62 30 64 33 1a 26 00  00 00 09 01 20 63 74 73  6b0d3.&......cts
*radiusTransportThread: Sep 09 23:56:53.059: 000001d0: 3a 73 65 63 75 72 69 74  79 2d 67 72 6f 75 70 2d  :security-group-
*radiusTransportThread: Sep 09 23:56:53.059: 000001e0: 74 61 67 3d 30 30 30 66  2d 30 30 1a 3a 00 00 01  tag=000f-00.:...
*radiusTransportThread: Sep 09 23:56:53.059: 000001f0: 37 10 34 9e 16 63 68 85  63 46 b1 f4 cb 2e 23 6a  7.4..ch.cF....#j
*radiusTransportThread: Sep 09 23:56:53.059: 00000200: d3 09 aa d9 4e c9 79 28  6e 45 6b 73 83 7e c8 1e  ....N.y(nEks.~..
*radiusTransportThread: Sep 09 23:56:53.059: 00000210: 8b a2 81 e8 45 d3 0d 3e  6b 84 ea d3 71 c1 3d 9a  ....E..>k...q.=.
*radiusTransportThread: Sep 09 23:56:53.059: 00000220: d9 b5 a1 8f 5b 1a 3a 00  00 01 37 11 34 83 48 73  ....[.:...7.4.Hs
*radiusTransportThread: Sep 09 23:56:53.059: 00000230: 34 e9 94 57 c7 dd 82 e9  1f 71 55 27 90 db cf a9  4..W.....qU'....
*radiusTransportThread: Sep 09 23:56:53.059: 00000240: 5c ce c8 f3 6f ba 5a 07  35 d5 0a ef 61 80 b4 05  \...o.Z.5...a...
*radiusTransportThread: Sep 09 23:56:53.059: 00000250: 16 22 0a ae b3 33 31 23  70 e2 24 33 4b 6b 4a     ."...31#p.$3KkJ
*radiusTransportThread: Sep 09 23:56:53.059: numAvps 0, rawOffset 20, rawLeft 587
*radiusTransportThread: Sep 09 23:56:53.059: numAvps 1, rawOffset 28, rawLeft 579
*radiusTransportThread: Sep 09 23:56:53.059: numAvps 2, rawOffset 68, rawLeft 539
*radiusTransportThread: Sep 09 23:56:53.059: numAvps 3, rawOffset 118, rawLeft 489
*radiusTransportThread: Sep 09 23:56:53.059: numAvps 4, rawOffset 124, rawLeft 483
*radiusTransportThread: Sep 09 23:56:53.059: numAvps 5, rawOffset 142, rawLeft 465
*radiusTransportThread: Sep 09 23:56:53.059: *** Counted VSA 150994944 AVP of length 45, code 1 atrlen 39)
*radiusTransportThread: Sep 09 23:56:53.059: numAvps 6, rawOffset 187, rawLeft 420
*radiusTransportThread: Sep 09 23:56:53.059: *** Counted VSA 150994944 AVP of length 191, code 1 atrlen 185)
*radiusTransportThread: Sep 09 23:56:53.059: numAvps 7, rawOffset 378, rawLeft 229
*radiusTransportThread: Sep 09 23:56:53.059: *** Counted VSA 150994944 AVP of length 75, code 1 atrlen 69)
*radiusTransportThread: Sep 09 23:56:53.059: numAvps 8, rawOffset 453, rawLeft 154
*radiusTransportThread: Sep 09 23:56:53.059: *** Counted VSA 150994944 AVP of length 38, code 1 atrlen 32)
*radiusTransportThread: Sep 09 23:56:53.060: numAvps 9, rawOffset 491, rawLeft 116
*radiusTransportThread: Sep 09 23:56:53.060: *** Counted VSA 922812416 AVP of length 58, code 16 atrlen 52)
*radiusTransportThread: Sep 09 23:56:53.060: numAvps 10, rawOffset 549, rawLeft 58
*radiusTransportThread: Sep 09 23:56:53.060: *** Counted VSA 922812416 AVP of length 58, code 17 atrlen 52)
*radiusTransportThread: Sep 09 23:56:53.060: Counted 11 AVPs (processed 607 bytes, left 0)
*radiusTransportThread: Sep 09 23:56:53.060: avpIndex 0, rawOffset 20, rawLeft 587, respOffset 360, respLeft 7732
*radiusTransportThread: Sep 09 23:56:53.060: .....processed 8 raw bytes, copied 6 bytes
*radiusTransportThread: Sep 09 23:56:53.060: avpIndex 1, rawOffset 28, rawLeft 579, respOffset 366, respLeft 7726
*radiusTransportThread: Sep 09 23:56:53.060: .....processed 40 raw bytes, copied 38 bytes
*radiusTransportThread: Sep 09 23:56:53.060: avpIndex 2, rawOffset 68, rawLeft 539, respOffset 404, respLeft 7688
*radiusTransportThread: Sep 09 23:56:53.060: .....processed 50 raw bytes, copied 48 bytes
*radiusTransportThread: Sep 09 23:56:53.060: avpIndex 3, rawOffset 118, rawLeft 489, respOffset 452, respLeft 7640
*radiusTransportThread: Sep 09 23:56:53.060: .....processed 6 raw bytes, copied 4 bytes
*radiusTransportThread: Sep 09 23:56:53.060: avpIndex 4, rawOffset 124, rawLeft 483, respOffset 456, respLeft 7636
*radiusTransportThread: Sep 09 23:56:53.060: .....processed 18 raw bytes, copied 16 bytes
*radiusTransportThread: Sep 09 23:56:53.060: avpIndex 5, rawOffset 142, rawLeft 465, respOffset 472, respLeft 7620
*radiusTransportThread: Sep 09 23:56:53.060: AVP: VendorId: 9, vendorType: 1, vendorLen:  39, Value:

*radiusTransportThread: Sep 09 23:56:53.060: 00000000: 75 72 6c 2d 72 65 64 69  72 65 63 74 2d 61 63 6c  url-redirect-acl
*radiusTransportThread: Sep 09 23:56:53.060: 00000010: 3d 41 43 4c 5f 57 45 42  41 55 54 48 5f 52 45 44  =ACL_WEBAUTH_RED
*radiusTransportThread: Sep 09 23:56:53.060: 00000020: 49 52 45 43 54                                    IRECT
*radiusTransportThread: Sep 09 23:56:53.060: Processed VSA 9, type 1, raw bytes 39, copied 20 bytes
*radiusTransportThread: Sep 09 23:56:53.060: .....processed 45 raw bytes, copied 0 bytes
*radiusTransportThread: Sep 09 23:56:53.060: avpIndex 6, rawOffset 187, rawLeft 420, respOffset 492, respLeft 7600
*radiusTransportThread: Sep 09 23:56:53.060: AVP: VendorId: 9, vendorType: 1, vendorLen:  185, Value:

*radiusTransportThread: Sep 09 23:56:53.060: 00000000: 75 72 6c 2d 72 65 64 69  72 65 63 74 3d 68 74 74  url-redirect=htt
*radiusTransportThread: Sep 09 23:56:53.060: 00000010: 70 73 3a 2f 2f 31 39 32  2e 31 36 38 2e 31 2e 32  ps://192.168.1.2
*radiusTransportThread: Sep 09 23:56:53.060: 00000020: 33 34 3a 38 34 34 33 2f  70 6f 72 74 61 6c 2f 67  34:8443/portal/g
*radiusTransportThread: Sep 09 23:56:53.060: 00000030: 61 74 65 77 61 79 3f 73  65 73 73 69 6f 6e 49 64  ateway?sessionId
*radiusTransportThread: Sep 09 23:56:53.060: 00000040: 3d 37 62 30 31 61 38 63  30 30 30 30 30 30 31 63  =7b01a8c0000001c
*radiusTransportThread: Sep 09 23:56:53.060: 00000050: 38 37 63 34 66 39 35 35  62 26 70 6f 72 74 61 6c  87c4f955b&portal
*radiusTransportThread: Sep 09 23:56:53.060: 00000060: 3d 34 30 36 63 39 33 66  30 2d 32 65 30 32 2d 31  =406c93f0-2e02-1
*radiusTransportThread: Sep 09 23:56:53.060: 00000070: 31 65 38 2d 62 61 37 31  2d 30 30 35 30 35 36 38  1e8-ba71-0050568
*radiusTransportThread: Sep 09 23:56:53.060: 00000080: 37 32 63 37 66 26 61 63  74 69 6f 6e 3d 6e 73 70  72c7f&action=nsp
*radiusTransportThread: Sep 09 23:56:53.060: 00000090: 26 74 6f 6b 65 6e 3d 37  34 37 33 64 37 36 66 30  &token=7473d76f0
*radiusTransportThread: Sep 09 23:56:53.060: 000000a0: 63 32 39 37 35 32 30 39  34 31 33 65 62 38 65 62  c2975209413eb8eb
*radiusTransportThread: Sep 09 23:56:53.060: 000000b0: 36 39 32 65 39 33 39                              692e939
*radiusTransportThread: Sep 09 23:56:53.060: Processed VSA 9, type 1, raw bytes 185, copied 170 bytes
*radiusTransportThread: Sep 09 23:56:53.060: .....processed 191 raw bytes, copied 0 bytes
*radiusTransportThread: Sep 09 23:56:53.060: avpIndex 7, rawOffset 378, rawLeft 229, respOffset 662, respLeft 7430
*radiusTransportThread: Sep 09 23:56:53.060: AVP: VendorId: 9, vendorType: 1, vendorLen:  69, Value:

*radiusTransportThread: Sep 09 23:56:53.060: 00000000: 41 43 53 3a 43 69 73 63  6f 53 65 63 75 72 65 2d  ACS:CiscoSecure-
*radiusTransportThread: Sep 09 23:56:53.060: 00000010: 44 65 66 69 6e 65 64 2d  41 43 4c 3d 23 41 43 53  Defined-ACL=#ACS
*radiusTransportThread: Sep 09 23:56:53.060: 00000020: 41 43 4c 23 2d 49 50 2d  50 45 52 4d 49 54 5f 41  ACL#-IP-PERMIT_A
*radiusTransportThread: Sep 09 23:56:53.060: 00000030: 4c 4c 5f 54 52 41 46 46  49 43 2d 35 37 66 36 62  LL_TRAFFIC-57f6b
*radiusTransportThread: Sep 09 23:56:53.060: 00000040: 30 64 33                                          0d3
*radiusTransportThread: Sep 09 23:56:53.060: Processed VSA 9, type 1, raw bytes 69, copied 0 bytes
*radiusTransportThread: Sep 09 23:56:53.060: .....processed 75 raw bytes, copied 0 bytes
*radiusTransportThread: Sep 09 23:56:53.060: avpIndex 7, rawOffset 453, rawLeft 154, respOffset 662, respLeft 7430
*radiusTransportThread: Sep 09 23:56:53.060: AVP: VendorId: 9, vendorType: 1, vendorLen:  32, Value:

*radiusTransportThread: Sep 09 23:56:53.060: 00000000: 63 74 73 3a 73 65 63 75  72 69 74 79 2d 67 72 6f  cts:security-gro
*radiusTransportThread: Sep 09 23:56:53.060: 00000010: 75 70 2d 74 61 67 3d 30  30 30 66 2d 30 30        up-tag=000f-00
*radiusTransportThread: Sep 09 23:56:53.060: Got SGT attribute from Radius Server valueLen: 7 and payloadLen: 30 
*radiusTransportThread: Sep 09 23:56:53.060: SGT received is  '000f-00' 
*radiusTransportThread: Sep 09 23:56:53.060: Processed VSA 9, type 1, raw bytes 32, copied 7 bytes
*radiusTransportThread: Sep 09 23:56:53.060: .....processed 38 raw bytes, copied 0 bytes
*radiusTransportThread: Sep 09 23:56:53.060: avpIndex 8, rawOffset 491, rawLeft 116, respOffset 669, respLeft 7423
*radiusTransportThread: Sep 09 23:56:53.060: AVP: VendorId: 311, vendorType: 16, vendorLen:  52, Value:

*radiusTransportThread: Sep 09 23:56:53.060: 00000000: 9e 16 63 68 85 63 46 b1  f4 cb 2e 23 6a d3 09 aa  ..ch.cF....#j...
*radiusTransportThread: Sep 09 23:56:53.060: 00000010: d9 4e c9 79 28 6e 45 6b  73 83 7e c8 1e 8b a2 81  .N.y(nEks.~.....
*radiusTransportThread: Sep 09 23:56:53.060: 00000020: e8 45 d3 0d 3e 6b 84 ea  d3 71 c1 3d 9a d9 b5 a1  .E..>k...q.=....
*radiusTransportThread: Sep 09 23:56:53.060: 00000030: 8f 5b                                             .[
*radiusTransportThread: Sep 09 23:56:53.060: SEND_KEY: secret: p@ssw0rd, secretLen: 8, dataLen: 50
*radiusTransportThread: Sep 09 23:56:53.060: Attr: Send_Key: DECRYPTED KEY: KeyLen: 32, Key:

*radiusTransportThread: Sep 09 23:56:53.060: 00000000: bd 9f 4b 8b 1b 7a 1a 53  b9 9d 52 7a b3 65 a1 05  ..K..z.S..Rz.e..
*radiusTransportThread: Sep 09 23:56:53.060: 00000010: 53 1f 64 db 4a be 77 c0  a3 9f cb 48 19 40 f5 62  S.d.J.w....H.@.b
*radiusTransportThread: Sep 09 23:56:53.060: Processed VSA 311, type 16, raw bytes 52, copied 32 bytes
*radiusTransportThread: Sep 09 23:56:53.060: .....processed 58 raw bytes, copied 0 bytes
*radiusTransportThread: Sep 09 23:56:53.060: avpIndex 9, rawOffset 549, rawLeft 58, respOffset 701, respLeft 7391
*radiusTransportThread: Sep 09 23:56:53.060: AVP: VendorId: 311, vendorType: 17, vendorLen:  52, Value:

*radiusTransportThread: Sep 09 23:56:53.060: 00000000: 83 48 73 34 e9 94 57 c7  dd 82 e9 1f 71 55 27 90  .Hs4..W.....qU'.
*radiusTransportThread: Sep 09 23:56:53.060: 00000010: db cf a9 5c ce c8 f3 6f  ba 5a 07 35 d5 0a ef 61  ...\...o.Z.5...a
*radiusTransportThread: Sep 09 23:56:53.060: 00000020: 80 b4 05 16 22 0a ae b3  33 31 23 70 e2 24 33 4b  ...."...31#p.$3K
*radiusTransportThread: Sep 09 23:56:53.060: 00000030: 6b 4a                                             kJ
*radiusTransportThread: Sep 09 23:56:53.060: RECV_KEY: secret: p@ssw0rd, secretLen: 8, dataLen: 50
*radiusTransportThread: Sep 09 23:56:53.060: Attr: Send_Key: DECRYPTED KEY: KeyLen: 32, Key:

*radiusTransportThread: Sep 09 23:56:53.060: 00000000: 10 07 24 73 8d f1 0e 93  28 6a 53 82 63 ff 6c 00  ..$s....(jS.c.l.
*radiusTransportThread: Sep 09 23:56:53.060: 00000010: 49 82 a7 ad c4 82 e3 75  99 6e 29 d4 29 99 73 05  I......u.n).).s.
*radiusTransportThread: Sep 09 23:56:53.060: Processed VSA 311, type 17, raw bytes 52, copied 32 bytes
*radiusTransportThread: Sep 09 23:56:53.060: .....processed 58 raw bytes, copied 0 bytes
*radiusTransportThread: Sep 09 23:56:53.060: Done - avpIndex 10, rawOffset 607, rawLeft 0, respOffset 733, respLeft 7359
*radiusTransportThread: Sep 09 23:56:53.060: 58:7f:57:45:b1:42 Access-Accept received from RADIUS server 192.168.1.234 (qid:2) with port:1812, pktId:193 for mobile 58:7f:57:45:b1:42 receiveId = 3
*radiusTransportThread: Sep 09 23:56:53.060: AuthorizationResponse: 0x44fe300


*radiusTransportThread: Sep 09 23:56:53.060: 	structureSize................................733

*radiusTransportThread: Sep 09 23:56:53.060: 	resultCode...................................0

*radiusTransportThread: Sep 09 23:56:53.060: 	protocolUsed.................................0x00000001

*radiusTransportThread: Sep 09 23:56:53.060: 	proxyState...................................58:7F:57:45:B1:42-03:09

*radiusTransportThread: Sep 09 23:56:53.060: 	Packet contains 10 AVPs:

*radiusTransportThread: Sep 09 23:56:53.060: 	    AVP[01] User-Name................................sitita (6 bytes)

*radiusTransportThread: Sep 09 23:56:53.060: 	    AVP[02] State....................................ReauthSession:7b01a8c0000001c87c4f955b (38 bytes)

*radiusTransportThread: Sep 09 23:56:53.060: 	    AVP[03] Class....................................CACS:7b01a8c0000001c87c4f955b:ise/325865143/1254 (48 bytes)

*radiusTransportThread: Sep 09 23:56:53.060: 	    AVP[04] EAP-Message..............................0x03470004 (54984708) (4 bytes)

*radiusTransportThread: Sep 09 23:56:53.060: 	    AVP[05] Message-Authenticator....................DATA (16 bytes)

*radiusTransportThread: Sep 09 23:56:53.060: 	    AVP[06] Cisco / Url-Redirect-Acl.................ACL_WEBAUTH_REDIRECT (20 bytes)

*radiusTransportThread: Sep 09 23:56:53.060: 	    AVP[07] Cisco / Url-Redirect.....................DATA (170 bytes)

*radiusTransportThread: Sep 09 23:56:53.060: 	    AVP[08] Cisco / CTS-SGT..........................000f-00 (7 bytes)

*radiusTransportThread: Sep 09 23:56:53.060: 	    AVP[09] Microsoft / MPPE-Send-Key................DATA (32 bytes)

*radiusTransportThread: Sep 09 23:56:53.060: 	    AVP[10] Microsoft / MPPE-Recv-Key................DATA (32 bytes)

Sitita · ‎09-10-2018

I have swapped to use Hardware Controller instead and it's work