Users Guide

Security Commands 940
Example
The following example configures the switch to use the new model command
set.
console(config)# aaa new-model
aaa server radius dynamic-author
Use this command to enter dynamic RADIUS server configuration mode.
Syntax
aaa server radius dynamic-author
Default Configuration
By default, no dynamic RADIUS servers are configured.
Command Mode
Global Configuration
User Guidelines
Configuring a dynamic RADIUS server causes the system to begin listening
on the default port 3799 for RADIUS CoA requests. The switch ensures that a
unique session key is sent to the RADIUS server in all Access-Request
packets. The Acct-Session-Id, User-Name, and Calling-Station-Id, Framed-
IP-Address, NAS-IP-Address (if configured in switch), NAS-Port identifiers
are maintained in the switch for 802.1X session identification. The switch
ensures that a unique Acct-Session-ID is sent to the RADIUS server in all
Access-Request packets. CoA-Request requests must contain at least one of
the Acct-Session-Id, Framed-IP-Address, User-Name, or Calling-Station-Id
for presentation to the NAS for CoA requests.
A valid authenticated RFC 3575 Disconnect-Request terminates the session
without disabling the port. The termination may cause the host to attempt to
reauthenticate on the port. If an ACL was applied for the session, the ACL is
removed when the session is terminated.