Cisco Catalyst 2960-XR Security Configuration Manual page 100

Configuring CoA on the Switch
Command or Action
Step 5
server-key [0 | 7] string
Example:
Switch(config-sg-radius)# server-key
your_server_key
Step 6 port port-number
Example:
Switch(config-sg-radius)# port 25
Step 7 auth-type {any | all | session-key}
Example:
Switch(config-sg-radius)# auth-type any
Step 8 ignore session-key
Step 9 ignore server-key
Example:
Switch(config-sg-radius)# ignore
server-key
Step 10 authentication command bounce-port ignore
Example:
Switch(config-sg-radius)# authentication
command bounce-port ignore
Step 11
authentication command disable-port ignore
Example:
Switch(config-sg-radius)# authentication
command disable-port ignore
Step 12
end
Example:
Switch(config-sg-radius)# end
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
78
Purpose
Configures the RADIUS key to be shared between a device and
RADIUS clients.
Specifies the port on which a device listens for RADIUS requests
from configured RADIUS clients.
Specifies the type of authorization the switch uses for RADIUS
clients.
The client must match all the configured attributes for authorization.
(Optional) Configures the switch to ignore the session-key.
For more information about the ignore command, see the Cisco IOS
Intelligent Services Gateway Command Reference on Cisco.com.
(Optional) Configures the switch to ignore the server-key.
For more information about the ignore command, see the Cisco IOS
Intelligent Services Gateway Command Reference on Cisco.com.
(Optional) Configures the switch to ignore a CoA request to
temporarily disable the port hosting a session. The purpose of
temporarily disabling the port is to trigger a DHCP renegotiation
from the host when a VLAN change occurs and there is no supplicant
on the endpoint to detect the change.
(Optional) Configures the switch to ignore a nonstandard command
requesting that the port hosting a session be administratively shut
down. Shutting down the port results in termination of the session.
Use standard CLI or SNMP commands to re-enable the port.
Returns to privileged EXEC mode.
Configuring RADIUS
OL-29434-01