Users Guide

Security Commands 971
A RADIUS CoA disable host port command administratively disables the
port. A RADIUS CoA disabled port requires administrative intervention to re-
enable the port using the no shutdown command. The authentication
command disable-port ignore disables processing of the CoA disable port
request.
If a valid and authenticated disable host port request is received from a
configured CoA client and the session cannot be found, the switch returns a
CoA-NAK message with the 503 Session Context Not Found response code.
If a valid and authenticated request is received from a configured CoA client
and the disable host port capability is administratively disabled, a CoA-NAK
response is returned with 501 Administratively Prohibited response code.
Command History
Syntax added in version 6.6 firmware.
Example
The following example sets the switch to ignore CoA bounce host port
commands.
console(config)# authentication command bounce-port ignore
The following example sets the switch to ignore CoA disable host port
commands.
console(config)# authentication command disable-port ignore
authentication control-direction
Use this command to control traffic flow for 801.2X unauthenticated
interfaces.
Syntax
authentication control-direction { in | both }
• in — Ingress traffic is dropped for unauthenticated hosts.
• both — Ingress and egress traffic is blocked for unauthenticated hosts.
Default Configuration
The default control direction is both.