Cisco IE-5000 User Manual

152
Configuring Switch-Based Authentication
Information About Configuring Switch-Based Authentication
CoA Request Response Code
The CoA Request response code can be used to convey a command to the switch. The supported commands are listed
in Table 26 on page 153.
CoA Session Identification
For disconnect and CoA requests targeted at a particular session, the switch locates the session based on one or more
of the following attributes:
 Calling-Station-Id (IETF attribute 31 which contains the host MAC address)
 Audit-Session-Id (Cisco VSA)
 Acct-Session-Id (IETF attribute 44)
Unless all session identification attributes included in the CoA message match the session, the switch returns a
Disconnect-NAK or CoA-NAK with the Invalid Attribute Value error-code attribute.
For disconnect and CoA requests targeted to a particular session, any one of these session identifiers can be used:
 Calling-Station-ID (IETF attribute 31, which should contain the MAC address)
Attribute Number Attribute Name
24 State
31 Calling-Station-ID
44 Acct-Session-ID
80 Message-Authenticator
101 Error-Cause
Value Explanation
201 Residual Session Context Removed
202 Invalid EAP Packet (Ignored)
401 Unsupported Attribute
402 Missing Attribute
403 NAS Identification Mismatch
404 Invalid Request
405 Unsupported Service
406 Unsupported Extension
407 Invalid Attribute Value
501 Administratively Prohibited
502 Request Not Routable (Proxy)
503 Session Context Not Found
504 Session Context Not Removable
505 Other Proxy Processing Error
506 Resources Unavailable
507 Request Initiated
508 Multiple Session Selection Unsupported

Cisco IE-5000 Specifications

General

Brand	Cisco
Model	IE-5000
Category	Switch
Language	English