Short Cycle Protection stuck in Grace
It is seen with DHCPv4 short cycle protection enabled, that the entry may get stuck in a Grace period.
Configuration
Configuration: set forwarding-options dhcp-relay server-group brian 23.155.128.198 set forwarding-options dhcp-relay server-group brian 23.155.128.199 set forwarding-options dhcp-relay group CALIX active-server-group brian set forwarding-options dhcp-relay group CALIX authentication password fail set forwarding-options dhcp-relay group CALIX authentication username-include domain-name fail.com set forwarding-options dhcp-relay group CALIX authentication username-include user-prefix fail set forwarding-options dhcp-relay group CALIX dynamic-profile DHCP-IP-DEMUX set forwarding-options dhcp-relay group CALIX access-profile RADIUS set forwarding-options dhcp-relay group CALIX short-cycle-protection lockout-min-time 5 set forwarding-options dhcp-relay group CALIX short-cycle-protection lockout-max-time 10 set forwarding-options dhcp-relay group CALIX interface ae0.0
Have client log in but fail auth.
abroot@milan-re1# run show subscribers Sep 07 07:59:59 Interface IP Address/VLAN ID User Name LS:RI demux0.3221225589 100 default:default {master}[edit] labroot@milan-re1# run show subscribers Sep 07 08:00:03 Interface IP Address/VLAN ID User Name LS:RI demux0.3221225590 100 default:default labroot@milan-re1# run clear network-access aaa statistics authentication Sep 07 08:00:39 {master}[edit] labroot@milan-re1# run show network-access aaa statistics authentication Sep 07 08:00:40 Authentication module statistics Requests received: 2 Accepts: 0 Rejects: 2 Challenges: 0 Timed out requests: 0
Short cycle protection working ok but eventually gets stuck in grace.
---(refreshed at 2024-09-07 07:45:50 PDT)--- Index Key State Exipre(s) Elapsed(s) Count 0 default/ 0:1a: 1: 0: 0: 1/23083821/ Lockout 9 1 31 ---(refreshed at 2024-09-07 07:45:51 PDT)--- Index Key State Exipre(s) Elapsed(s) Count 0 default/ 0:1a: 1: 0: 0: 1/23083821/ Lockout 8 2 31 ---(refreshed at 2024-09-07 07:45:52 PDT)--- Index Key State Exipre(s) Elapsed(s) Count 0 default/ 0:1a: 1: 0: 0: 1/23083821/ Lockout 7 3 31 ---(refreshed at 2024-09-07 07:45:53 PDT)--- Index Key State Exipre(s) Elapsed(s) Count 0 default/ 0:1a: 1: 0: 0: 1/23083821/ Lockout 6 4 31 ---(refreshed at 2024-09-07 07:45:54 PDT)--- Index Key State Exipre(s) Elapsed(s) Count 0 default/ 0:1a: 1: 0: 0: 1/23083821/ Lockout 5 5 31 ---(refreshed at 2024-09-07 07:45:55 PDT)---
Now get stuck:
--(refreshed at 2024-09-07 07:47:47 PDT)--- Index Key State Exipre(s) Elapsed(s) Count 0 default/ 0:1a: 1: 0: 0: 1/23083821/ Grace 900 0 129 ---(refreshed at 2024-09-07 07:47:48 PDT)--- Index Key State Exipre(s) Elapsed(s) Count 0 default/ 0:1a: 1: 0: 0: 1/23083821/ Grace 900 0 130 ---(refreshed at 2024-09-07 07:47:49 PDT)--- Index Key State Exipre(s) Elapsed(s) Count 0 default/ 0:1a: 1: 0: 0: 1/23083821/ Grace 900 0 131 ---(refreshed at 2024-09-07 07:47:50 PDT)--- Index Key State Exipre(s) Elapsed(s) Count 0 default/ 0:1a: 1: 0: 0: 1/23083821/ Grace 900 0 132 ---(refreshed at 2024-09-07 07:47:51 PDT)--- Index Key State Exipre(s) Elapsed(s) Count 0 default/ 0:1a: 1: 0: 0: 1/23083821/ Grace 900 0 133
There is no work around for this. Issue Fixed via PR1835753