Administrator Guide

Table 100. DM EAP/MAB Session(s) disconnect (continued)
Radius Attribute
code
Radius Attribute Description Mandatory
31 Calling-Station-Id The link address from which session is connected. Yes, If NAS-Port attribute
is not provided
Authorization Attributes
26 Vendor-Specific t=26(vendor-specific);l=length;vendor-
identification-attribute;Length=value;
Data=”cmd=terminate-session”
Yes
Table 101. DM AAA Session(s) disconnect
Radius Attribute
code
Radius Attribute Description Mandatory
NAS Identification Attributes
4 NAS-IP-Address IPv4 address of the NAS. No
95 NAS-IPv6–Address IPv6 address of the NAS. No
Session Identification Attributes
1 User-Name
Name of the user associated with one or more
sessions
- AAA user name
Yes
5 NAS-Port Port on which session is terminated No
Authorization Attributes
26 Vendor-Specific t=26(vendor-specific);l=length;vendor-
identification-attribute;Length=value;
Data=”cmd=disconnect-user”
Yes
Error-cause Values
It is possible that a Dynamic Authorization Server cannot honor Disconnect Message request or CoA request packets for some
reason.
The Error-Cause Attribute provides more detail on the cause of the problem. It may be included within CoA-Nak and
Disconnect-Nak packets.
The following table describes various error causes for the CoA and DM requests:
Table 102. Error-cause Values
Serial
Number
Error-cause Scenarios
1 Unsupported Attributes(401)
● CoA or DM request containing one or more unsupported attributes.
● DM requests containing attributes other than NAS/Session identification
attributes.
2 Invalid Attribute Value(407)
● CoA or DM request containing the incorrect NAS-Port, calling-station-id, and
Vendor-Specific attribute values.
3 NAS Identification
Mismatch(403)
● CoA request containing NAS-IP-Address or NAS-IPV6-Address that does not
match NAS.
4 Administratively
Prohibited(501)
● NAS is configured to ignore the CoA or DM request. Also, dot1x is not
configured on the NAS-Port.
862 Security