How To Configure Radius Change-Of-Authorization - Cisco Catalyst 2960 series Configuration Manual

The switch attempts to disable the port.
If the port-disable operation is successful, the signal that triggered the port-disable is removed from the standby
stack master.
If the stack master fails before the port-disable operation completes, the port is disabled after stack master
change-over based on the original command (which is subsequently removed).
If the stack master fails before sending a CoA-ACK message, the new stack master treats the re-sent command
as a new command.

How to Configure RADIUS Change-of-Authorization

Configuring CoA on the Switch
Follow these steps to configure CoA on a switch. This procedure is required.
SUMMARY STEPS
1. enable
2. configure terminal
3. aaa new-model
4. aaa server radius dynamic-author
5. client {ip-address | name} [vrf vrfname] [server-key string]
6. server-key [0 | 7] string
7. port port-number
8. auth-type {any | all | session-key}
9. ignore session-key
10. ignore server-key
11. authentication command bounce-port ignore
12. authentication command disable-port ignore
13. end
14. show running-config
15. copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1
enable
Example:
Switch> enable
Purpose
Enables privileged EXEC mode. Enter your password if prompted.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
How to Configure RADIUS Change-of-Authorization
973