Users Guide

Security Commands 1086
auth-type
Use this command to set the accepted authorization types for RADIUS CoA
clients. Use the no form of the command to set the authorization type to the
default (all).
Syntax
auth-type { all | any |session-key}
no auth-type
• all—Selects all CoA client authentication types. All session identification
attributes must match for the authentication to succeed.
• any—Selects any CoA client authentication type. Any session
identification attribute may match for the authentication to succeed.
• session-key—Indicates that the session-key (Acct-Session-ID) must match
for authentication to succeed.
Default Configuration
The default is to authenticate with all received session identification
parameters.
Command Modes
Dynamic RADIUS Configuration
User Guidelines
This command specifies the session identification attributes to validate
before acting on a CoA disconnect request. The any/all parameter only
applies to the received attributes. It does not mandate which attributes must
be contained in the received message. If session-key is specified and the
received session ID (Acct-Session-ID) is valid, authentication succeeds even
if the session-key does not match. If authentication succeeds and the session-
key does not match, a response (Disconnect-NAK) will be sent. If
authentication does not succeed, no response is sent.
This command works in concert with the ignore command. The ignore
command refines the all parameter to limit the attribute matching.