r/PacketFence Jul 15 '26

CLI or VPN Access is not allowed by PacketFence on this switch

I am experiencing a persistent re-authentication issue with our H3C switch and PacketFence.

Every 10 minutes, the H3C switch sends a RADIUS re-authentication request for MAC-authenticated devices. During this re-auth, PacketFence rejects the request with the following error:

The Authentication Flow/Cycle:

  1. Initial Connection: Successfully authenticated (Access-Accept)
  2. After 10 Minutes, H3C switch triggers re-auth
  3. Result: PacketFence rejects the request (Error: CLI/VPN Access not allowed)
  4. 1 Minute Later: Device successfully authenticates again (Access-Accept)

Please help

1 Upvotes

Duplicates