Cisco Catalyst 2975 Software Configuration Manual page 218

Controlling Switch Access with RADIUS
Table 9-3
Value
201
202
401
402
403
404
405
406
407
501
502
503
504
505
506
507
508
Preconditions
To use the CoA interface, a session must already exist on the switch. CoA can be used to identify a
session and enforce a disconnect request. The update affects only the specified session.
CoA Request Response Code
The CoA Request response code can be used to convey a command to the switch. The supported
commands are listed in
Session Identification
For disconnect and CoA requests targeted at a particular session, the switch locates the session based on
one or more of the following attributes:
•
•
•
Unless all session identification attributes included in the CoA message match the session, the switch
returns a Disconnect-NAK or CoA-NAK with the Invalid Attribute Value error-code attribute.
Catalyst 2975 Switch Software Configuration Guide
9-22
Error-Cause Values
Explanation
Residual Session Context Removed
Invalid EAP Packet (Ignored)
Unsupported Attribute
Missing Attribute
NAS Identification Mismatch
Invalid Request
Unsupported Service
Unsupported Extension
Invalid Attribute Value
Administratively Prohibited
Request Not Routable (Proxy)
Session Context Not Found
Session Context Not Removable
Other Proxy Processing Error
Resources Unavailable
Request Initiated
Multiple Session Selection Unsupported
Table 9-4 on page
Calling-Station-Id (IETF attribute 31 which contains the host MAC address)
Audit-Session-Id (Cisco VSA)
Acct-Session-Id (IETF attribute 44)
Chapter 9
9-24.
Configuring Switch-Based Authentication
OL-19720-02