Cisco WLC does not respect the Expiration of a user on Radius server.

[Matthew Carriere]

Hi everyone,

I have a CISCO WLC that is configured to use a FreeRadius server as  
the authentication point.

Everything is working except the Expiration.

I set an Expiration value programatically from a Ruby script by  
entering a record into the radcheck table:

UserName | Matthew
Attribute | Expiration
op | :=
Value | April 29 2009 02:14:48

Here's the scenario,

before the expiration date the user authenticates to the Radius server  
and then is able to use the Wireless (Cisco WLC). However, when the  
expiration time passes, the user can no longer authenticate to the  
radius server (which is correct), but they are still connected to the  
Wireless.

Does anyone have some experience with this scenario to offer some  
suggestions to help troubleshoot?

Thanks

Matthew Carriere