Forum Discussion

tkhanna82's avatar
tkhanna82
Icon for Nimbostratus rankNimbostratus
Jun 05, 2025

Unable to forward COA traffic to AP via F5

I have a AP talking to Radius server via F5 and radius traffic going through but when radius server is sending a COA packet on udp 3799, it is not getting forwarded to AP. Can someone help

device
devops
security

3 Replies

  • Injeyan_Kostas's avatar
    Injeyan_Kostas
    Icon for Cumulonimbus rankCumulonimbus
    Jun 05, 2025

    What is your topology?
    Are you using SNAT to the VIP that AP sends radius traffic to?
    If so radius knows F5s SNAT IP and will try send COA packets to it and not to the AP.

  • lnxgeek's avatar
    lnxgeek
    Icon for MVP rankMVP
    Jun 06, 2025

    Generally you cannot use any SNAT when dealing with these kinds of protocols. I have only played around with Cisco ISE and that can only work in a full routed environment without any kind of SNAT.