White Papers

Table 86. Vendor-specific Attributes (continued)
26 Vendor-
specific
NAS supports the following values for the vendor-specific attributes:
● t=26(vendor-speific);l=length;vendor-identification-attribute;Length=value;data=”cmd=re-
authenticate”
● t=26(vendor-speific);l=length;vendor-identification-
attribute;Length=value;data=”cmd=disable-host-port”
● t=26(vendor-speific);l=length;vendor-identification-
attribute;Length=value;data=”cmd=bounce-host-port”
● t=26(vendor-speific);l=length;vendor-identification-
attribute;Length=value;data=”cmd=terminate-session”
● t=26(vendor-speific);l=length;vendor-identification-
attribute;Length=value;data=”cmd=disconnect-user”
The vendor identification attribute can be one of the following:
● v=9(Cisco);Vendor-Type=1(cisco-av-pair) Length = value
● v=6027 (Force10);Vendor-Type=1(Force10-av-pair) Length = value
Table 87. DM Attributes
Attribute
code
Attribute Description
1 User-Name(Mandatory) Name of the user associated with one or more sessions.
Error-cause Values
It is possible that a Dynamic Authorization Server cannot honor Disconnect Message request or CoA request packets for some
reason.
The Error-Cause Attribute provides more detail on the cause of the problem. It may be included within CoA-Nak and
Disconnect-Nak packets.
The following table describes various error causes for the CoA and DM requests:
Table 88. Error-cause Values
Serial
Number
Error-cause Scenarios
1 Unsupported Attributes(401)
● CoA or DM request containing one or more unsupported attributes.
● DM requests containing attributes other than NAS/Session identification
attributes.
2 Invalid Attribute Value(407)
● CoA or DM request containing the incorrect NAS-Port, calling-station-id, and
Vendor-Specific attribute values.
3 NAS Identification
Mismatch(403)
● CoA request containing NAS-IP-Address or NAS-IPV6-Address that does not
match NAS.
4 Administratively
Prohibited(501)
● NAS is configured to ignore the CoA or DM request. Also, dot1x is not
configured on the NAS-Port.
5 Session Context Not
Found(503)
● CoA or DM request containing session identification attributes that does not
match any of the NAS user sessions.
6 Resource Unavailable(506)
● Internal CoA or DM message processing errors.
7 Missing Attribute(402)
● CoA or DM request without Vendor-specific attribute or invalid Vendor-
specific attribute.
● CoA with re-authenticate or terminate request not containing calling-station-
id or NAS-Port attribute.
● CoA with disable-port or bounce-port request not containing NAS-Port
attribute.
● DM request not containing user-name attribute.
Security 719