IPoE Session disconnect via COA asr 9k

[TuralLachinov]

Hi,

I want to disconnect IPoE session from Radius via COA, but still un successfull,

Is there anybody can help me ?

Config:

policy-map type control subscriber BNG-PM
 event session-start match-first
  class type control subscriber IPoE_CGN do-until-failure
   10 activate dynamic-template IPoE-TPL
   20 authorize aaa list default format USERNAME-FORMAT password cisco
   30 activate dynamic-template IP_QOS_TPL2
   40 activate dynamic-template POLICY-10
   50 activate dynamic-template POLICY-20
  !
 !
 event authorization-failure match-first
  class type control subscriber IPoE_CGN do-until-failure
   10 activate dynamic-template IPSUB_UNAUTH_TEMPLATE
   20 set-timer AUTH_TMR_CM 3
  !
 !
 event timer-expiry match-first
  class type control subscriber AUTH_TMR_CM do-until-failure
   10 disconnect

=========================================

interface Bundle-Ether1.515
 ipv4 point-to-point
 ipv4 unnumbered Loopback100
 arp learning disable
 service-policy type control subscriber BNG-PM
 ipsubscriber ipv4 l2-connected
  initiator dhcp
 !
 encapsulation ambiguous dot1q 515 second-dot1q 2000-2050

===================================================

Radius COA Command:

echo "cisco-avpair='subscriber:command=account-logoff',acct-session-id=${ID}"         | radclient -x ${NAS}:1700  coa        ${Secret}

====================================================

Debug on the ASR 9k says:

Unable to get attributes from COA context

Please help:

Regards

Tural

[xthuijs]

while this config should catch the SSL based session I dont think it will work for the browser because the browser expects to see an encrypted session and we will not provide that because of the http redirect.

redirecting https links is difficult as it will always result in some security violation (since the requested cert never matches the one that comes out of the box's redirect page).

cheers

xander

[TuralLachinov]

Hi Alex,

Thank you for the response.

What would you suggest as a solution to https redirect.?

Kindly

Tural