Users Guide

Security Commands 1008
• session-key—Indicates that the session-key (Acct-Session-ID) must match
for authentication to succeed.
Default Configuration
The default is to authenticate with all received session identification
parameters.
Command Modes
Dynamic RADIUS Configuration
User Guidelines
This command specifies the session identification attributes to validate
before acting on a CoA disconnect request. The any/all parameter only
applies to the received attributes. It does not mandate which attributes must
be contained in the received message. If session-key is specified and the
received session ID (Acct-Session-ID) is valid, authentication succeeds even
if the session-key does not match. If authentication succeeds and the session-
key does not match, a response (Disconnect-NAK) will be sent. If
authentication does not succeed, no response is sent.
This command works in concert with the ignore command. The ignore
command refines the all parameter to limit the attribute matching.
Command History
Introduced in version 6.2.0.1 firmware.
Example
console(config-radius-da)# auth-type all
client
Use this command to enter the CoA client parameters.
Syntax
client {ip-address | hostname } [ server-key [0 | 7] key-string ]
no client {ip-address | hostname }