Issue Description
After service cutover is performed on the downstream service interface of an ME60, the original users cannot go online.
Handling Process
- Run thedis access-user interface GigabitEthernet x/x/x.300Xcommand on the ME60 to check that no users go online from the service interface where cutover is performed.
- Run thedis aaa online-fail-record interface GigabitEthernet 1/1/6.3001command to check that the user online failure is caused by a RADIUS authentication rejection.
It is doubted that users connected to this service interface are not unbundled on the RADIUS server side.
After users connected to this service interface are unbundled on the RADIUS server side, users can properly go online.
Root Cause
Users connected to this service interface are not unbundled on the RADIUS server side, leading to an authentication failure for the users who attempt to go online from the new interface.
Solution
Unbundle the users connected to this service interface on the RADIUS server side.
Leave a comment