Concept Guide

Attributes
In Disconnect messsage requests and CoA-Request packets, certain attributes are used to uniquely identify the NAS as well as user
sessions on the NAS.
The combination of NAS and session identication attributes included in a CoA-request or a disconnect-message request must match at
least one session in order for a request to be successful; otherwise, a disconnect-Nak or CoA-Nak is sent. For disconnect-user operations
using DMs, if all NAS identication attributes match, and more than one session matches all of the session identication attributes, then a
CoA-request or a disconnect-message request applies to all matching sessions.
The following tables describe the various types of attributes that identify the NAS and the user sessions:
Table 90. NAS Identication Attributes
Attribute
code
Attribute Description
4 NAS-IP-Address IPv4 address of the NAS.
95 NAS-IPv6–Address IPv6 address of the NAS.
Table 91. Change of Authorization (CoA) Attribute
Attribute
code
Attribute Description
5 NAS-Port Port associated with the session to be processed for EAP or MAB users or the VTY ID for
AAA sessions.
Table 92. Session Identication Attributes
Attribute
code
Attribute Description
31 Calling-Station-Id (MAC
Address)
The link address from which session is connected.
Table 93. Vendor-specic Attributes
Attribute
code
Attribute Description
26 Vendor-
specic
NAS supports the following values for the vendor-specic attributes:
• t=26(vendor-speic);l=length;vendor-identication-attribute;Length=value;data=”cmd=re-
authenticate”
• t=26(vendor-speic);l=length;vendor-identication-attribute;Length=value;data=”cmd=disable-host-
port”
• t=26(vendor-speic);l=length;vendor-identication-attribute;Length=value;data=”cmd=bounce-host-
port”
• t=26(vendor-speic);l=length;vendor-identication-attribute;Length=value;data=”cmd=terminate-
session”
• t=26(vendor-speic);l=length;vendor-identication-attribute;Length=value;data=”cmd=disconnect-
user”
The vendor identication attribute can be one of the following:
• v=9(Cisco);Vendor-Type=1(cisco-av-pair) Length = value
870 Security