The switch attempts to disable the port.
If the port-disable operation is successful, the signal that triggered the port-disable is removed from the standby
stack master.
If the stack master fails before the port-disable operation completes, the port is disabled after stack master
change-over based on the original command (which is subsequently removed).
If the stack master fails before sending a CoA-ACK message, the new stack master treats the re-sent command
as a new command.
How to Configure RADIUS Change-of-Authorization
Configuring CoA on the Switch
Follow these steps to configure CoA on a switch. This procedure is required.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
aaa new-model
4.
aaa server radius dynamic-author
5.
client {ip-address | name} [vrf vrfname] [server-key string]
6.
server-key [0 | 7] string
7.
port port-number
8.
auth-type {any | all | session-key}
9.
ignore session-key
10.
ignore server-key
11.
authentication command bounce-port ignore
12.
authentication command disable-port ignore
13.
end
14.
show running-config
15.
copy running-config startup-config
DETAILED STEPS
PurposeCommand or Action
Enables privileged EXEC mode. Enter your password if prompted.enable
Step 1
Example:
Switch> enable
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
973
How to Configure RADIUS Change-of-Authorization