Deployment Guide

Table 91. Change of Authorization (CoA) Attribute
Attribute
code
Attribute Description
5 NAS-Port Port associated with the session to be processed for EAP or MAB users or the VTY ID
for AAA sessions.
Table 92. Session Identification Attributes
Attribute
code
Attribute Description
31 Calling-Station-Id (MAC
Address)
The link address from which session is connected.
Table 93. Vendor-specific Attributes
Attribute
code
Attribute Description
26 Vendor-
specific
NAS supports the following values for the vendor-specific attributes:
● t=26(vendor-speific);l=length;vendor-identification-attribute;Length=value;data=”cmd=re-
authenticate”
● t=26(vendor-speific);l=length;vendor-identification-
attribute;Length=value;data=”cmd=disable-host-port”
● t=26(vendor-speific);l=length;vendor-identification-
attribute;Length=value;data=”cmd=bounce-host-port”
● t=26(vendor-speific);l=length;vendor-identification-
attribute;Length=value;data=”cmd=terminate-session”
● t=26(vendor-speific);l=length;vendor-identification-
attribute;Length=value;data=”cmd=disconnect-user”
The vendor identification attribute can be one of the following:
● v=9(Cisco);Vendor-Type=1(cisco-av-pair) Length = value
● v=6027 (Force10);Vendor-Type=1(Force10-av-pair) Length = value
Table 94. DM Attributes
Attribute
code
Attribute Description
1 User-Name(Mandatory) Name of the user associated with one or more sessions.
Error-cause Values
It is possible that a Dynamic Authorization Server cannot honor Disconnect Message request or CoA request packets for some
reason.
The Error-Cause Attribute provides more detail on the cause of the problem. It may be included within CoA-Nak and
Disconnect-Nak packets.
The following table describes various error causes for the CoA and DM requests:
Table 95. Error Causes for CoA and DM Requests
Serial
Number
Error-cause Scenarios
1 Unsupported Attributes(401)
● CoA or DM request containing one or more unsupported attributes.
● DM requests containing attributes other than NAS/Session identification
attributes.
2 Invalid Attribute Value(407)
● CoA or DM request containing the incorrect NAS-Port, calling-station-id, and
Vendor-Specific attribute values.
Security 853