Users Guide

Security Commands 1123
• Server-key—Do not attempt to authenticate with the server key.
Default Configuration
The default is to authenticate using all parameters present in the received
message as specified by the configured auth-type.
Command Modes
Dynamic RADIUS Configuration
User Guidelines
This command specifies the attributes to validate before acting on a CoA or
disconnect request. If session-key is specified and the session ID is valid,
authentication succeeds even if the session-key does not match. If the
session-key (Acct-Session-ID) does not match, a Disconnect-ACK is sent.
The ignore command refines the all parameter to limit the attribute
matching.
Setting the auth-type to session-key in conjunction with setting the ignore
session-key is invalid and causes all configured servers to authenticate with no
warnings.
Command History
Introduced in version 6.2.0.1 firmware.
Example
console(config-radius-da)# ignore session-key
port
Use this command to set the port on which to listen for CoA and disconnect
requests from authorized RADIUS CoA clients.
Syntax
port port–number
no port
•
port-number —An integer in the range of 1025–65535