Cisco Catalyst 2960-XR User Manual

•
Telnet, SSH, rlogin, or privileged EXEC services
•
Connection parameters, including the host or client IP address, access list, and user timeouts
Related Topics
Prerequisites for Controlling Switch Access with RADIUS, on page 51
RADIUS Change of Authorization
This section provides an overview of the RADIUS interface including available primitives and how they are
used during a Change of Authorization (CoA).
•
Change-of-Authorization Requests
•
CoA Request Response Code
•
CoA Request Commands
•
Session Reauthentication
•
Stacking Guidelines for Session Termination
A standard RADIUS interface is typically used in a pulled model where the request originates from a network
attached device and the response come from the queried servers. Catalyst switches support the RADIUS
Change of Authorization (CoA) extensions defined in RFC 5176 that are typically used in a pushed model
and allow for the dynamic reconfiguring of sessions from external authentication, authorization, and accounting
(AAA) or policy servers.
The switch supports these per-session CoA requests:
•
Session reauthentication
•
Session termination
•
Session termination with port shutdown
•
Session termination with port bounce
This feature is integrated with the Cisco Identity Services Engine, and the Cisco Secure Access Control Server
(ACS) 5.1.
The RADIUS interface is enabled by default on Catalyst switches. However, some basic configuration is
required for the following attributes:
• Security and Password—refer to the “Preventing Unauthorized Access to Your Switch” section in this
guide.
• Accounting—refer to the “Starting RADIUS Accounting” section in the Configuring Switch-Based
Authentication chapter in this guide.
Change-of-Authorization Requests
Change of Authorization (CoA) requests, as described in RFC 5176, are used in a push model to allow for
session identification, host reauthentication, and session termination. The model is comprised of one request
(CoA-Request) and two possible response codes:
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
OL-29434-01 55
Configuring RADIUS
RADIUS Change of Authorization

Cisco Catalyst 2960-XR Specifications

General

Brand	Cisco
Model	Catalyst 2960-XR
Category	Switch
Language	English