we are using Checkpoint's Identity Awareness feature to keep track of users to allow internet access. This basically maps IP addresses to AD accounts. One way to update this system is using Radius accounting which is ideal for WiFi.
We have our Zonedirector set up to send accounting packets to Checkpoint and this works well giving the user access to the internet seamlessly.
However .... when a user roams to another AP the Indentity Awareness looses the association between IP and username. As neither has changed this can only be because Zonedirector has sent a packet to Checkpoint to say that the user has left that AP and not sent another to tell the user it has reassociated to the new AP.
Is there anything I can do to fix this behaviour ?
Agreed, I'm asking the same questions of both parties and getting similar responses. I think that Ruckus are on higher ground as Checkpoint are ignoring the Session IDs but introducing a fraction of a second delay on the Start packets does fix the issue.
At the moment I'm working round the issue by using FreeRADIUS to introduce a 0.5 sec delay on the start packets.