Cisco Catalyst 2960 Series, Configuration Manual

Page: 1055 / 2288

The switch attempts to disable the port.
If the port-disable operation is successful, the signal that triggered the port-disable is removed from the standby
stack master.
If the stack master fails before the port-disable operation completes, the port is disabled after stack master
change-over based on the original command (which is subsequently removed).
If the stack master fails before sending a CoA-ACK message, the new stack master treats the re-sent command
as a new command.
How to Configure RADIUS Change-of-Authorization
Configuring CoA on the Switch
Follow these steps to configure CoA on a switch. This procedure is required.
SUMMARY STEPS
1.
enable
2. configure terminal
3.
aaa new-model
4. aaa server radius dynamic-author
5. client { ip-address | name } [ vrf vrfname ] [ server-key string ]
6.
server-key
[
0
|
7
] string
7. port port-number
8.
auth-type { any | all | session-key }
9.
ignore session-key
10. ignore server-key
11.
authentication command bounce-port ignore
12. authentication command disable-port ignore
13. end
14.
show running-config
15. copy running-config startup-config
DETAILED STEPS
Purpose Command or Action
Enables privileged EXEC mode. Enter your password if prompted. enable Step 1
Example:
Switch> enable
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
973
How to Configure RADIUS Change-of-Authorization