CLI Guide

Security Commands 945
A RADIUS CoA disable host port command administratively disables the
port. A RADIUS CoA disabled port requires administrative intervention to re-
enable the port using the no shutdown command. The authentication
command disable-port ignore disables processing of the CoA disable port
request.
If a valid and authenticated disable host port request is received from a
configured CoA client and the session cannot be found, the switch returns a
CoA-NAK message with the 503 Session Context Not Found response code.
If a valid and authenticated request is received from a configured CoA client
and the disable host port capability is administratively disabled, a CoA-NAK
response is returned with 501 Administratively Prohibited response code.
Command History
Syntax added in version 6.6 firmware.
Example
The following example sets the switch to ignore CoA bounce host port
commands.
console(config)# authentication command bounce-port ignore
The following example sets the switch to ignore CoA disable host port
commands.
console(config)# authentication command disable-port ignore
authentication critical recovery
Use the authentication critical recovery command to control the load placed
on RADIUS servers.
Syntax
authentication critical recovery max-reauth number-of-clients
no authentication critical recovery max-reauth number-of-clients
• number-of-clients —The maximum number of 802.1X supplicants that
will be re-authenticated per second. Range 1 to 50 clients.