Coa Request Response Code - Cisco Catalyst 4500 series Administration Manual

Controlling Switch Access with RADIUS
Table 46-2
Table 46-2
Attribute Number
24
31
44
80
101
Table 46-3
Table 46-3
Value
201
202
401
402
403
404
405
406
407
501
502
503
504
505
506
507
508
Preconditions
To use the CoA interface, a session must already exist on the switch. CoA can be used to identify a
session and enforce a disconnect request. The update affects only the specified session.

CoA Request Response Code

The CoA Request response code can be used to convey a command to the switch. The supported
commands are listed in
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
46-100
shows the IETF attributes are supported for this feature.
Supported IETF Attributes
Attribute Name
State
Calling-Station-ID
Acct-Session-ID
Message-Authenticator
Error-Cause
shows the possible values for the Error-Cause attribute.
Error-Cause Values
Explanation
Residual Session Context Removed
Invalid EAP Packet (Ignored)
Unsupported Attribute
Missing Attribute
NAS Identification Mismatch
Invalid Request
Unsupported Service
Unsupported Extension
Invalid Attribute Value
Administratively Prohibited
Request Not Routable (Proxy)
Session Context Not Found
Session Context Not Removable
Other Proxy Processing Error
Resources Unavailable
Request Initiated
Multiple Session Selection Unsupported
Table 46-4 on page
Chapter 46 Configuring 802.1X Port-Based Authentication
46-102.
OL_28731-01