Users Guide

Security Commands 943
console(config)# dot1x system-auth-control
console(config)# interface range gi1/0/1-24
console(config-if)# authentication port-control auto
console(config-if)# authentication host-mode multi-auth
console(config-if)# exit
console(config)# radius server 1.1.1.1
console(Config-radius)#primary
console(Config-radius)#exit
console(config)# radius server 2.2.2.2
console(Config-radius)#exit
console(config)# radius server 3.3.3.3
console(Config-radius)#key “That’s your secret.”
console(Config-radius)#exit
console(config)# radius server key “Keep it. Keep it.”
console(config)# aaa server radius dynamic-author
console(config-radius-da)# client 4.4.4.4 server-key 0 “That’s your secret.”
console(config-radius-da)# client 5.5.5.5
console(config-radius-da)# server-key 0 “Keep it. Keep it.”
console(config-radius-da)# port 3799
console(config-radius-da)# auth-type any
console(config-radius-da)# exit
console(config)#radius server attribute 4 3.3.3.3
console(config)#dot1x system-auth-control
console(config)#exit
console#clear authentication sessions
authentication command
Use the authentication command {bounce-port|disable-port} ignore to
disable processing of RADIUS CoA requests to bounce the host port. The no
form of this command honors RADIUS CoA bounce host port requests.
Syntax
authentication command { bounce-port | disable-port } ignore
no authentication command { bounce-port | disable-port } ignore
• bounce-port —Ignore CoA requests to disable the port for 10 seconds and
then re-enable it.
• disable-port —Ignore CoA requests to administratively disable the port.
Default Configuration
By default, RADIUS CoA bounce host port requests are honored.