CoA Request Response Code The CoA Request response code can be used to convey a command to the switch. The packet format for a CoA Request Response code as defined in RFC 5176 consists of the following fields: Code, Identifier, Length, Authenticator, and Attributes in the Type:Length:Value (TLV) format. The Attributes field is used to carry Cisco vendor-specific attributes (VSAs). Session Identification For disconnect and CoA requests targeted at a particular session, the switch locates the session based on one or more of the following attributes:
• Acct-Session-Id (IETF attribute #44) • Audit-Session-Id (Cisco VSA) • Calling-Station-Id (IETF attribute #31 which contains the host MAC address) • IPv6 Attributes, which can be one of the following: • Framed-IPv6-Prefix (IETF attribute #97) and Framed-Interface-Id (IETF attribute #96), which together create a full IPv6 address per RFC 3162 • Framed-IPv6-Address • Plain IP Address (IETF attribute #8) Unless all session identification attributes included in the CoA message match the session, the switch returns a Disconnect-NAK or CoA-NAK with the “Invalid Attribute Value” error-code attribute.
If more than one session identification attribute is included in the message, all the attributes must match the session or the switch returns a Disconnect- negative acknowledgment (NAK) or CoA-NAK with the error code “Invalid Attribute Value.” The packet format for a CoA Request code as defined in RFC 5176 consists of the fields: Code, Identifier, Length, Authenticator, and Attributes in Type:Length:Value (TLV) format.
Configuring RADIUS CoA Request Response Code Value Explanation 407 Invalid Attribute Value 501 Administratively Prohibited 502 Request Not Routable (Proxy) 503 Session Context Not Found 504 Session Context Not Removable 505 Other Proxy Processing Error 506 Resources Unavailable 507 Request Initiated 508 Multiple Session Selection Unsupported Configuring RADIUS 7