Dell N3200-ON EMC Networking N-Series Switches CLI Reference Guide version 6.6 - Page 942

NAK response is returned with 501 Administratively Prohibited response code. • Bounce Port: A bounce port request disables the port for 10 seconds (terminating all sessions on the port) and then re-enables the port. The termination disables access to the network for all hosts on the port by disabling the link and may cause the hosts to attempt to re-authenticate when the link is brought up. Therefore, it is recommended that the bounce port request only be used for ports configured in 802.1X auto mode. If a valid and authenticated bounce port request is received from a configured CoA client and the session cannot be found, the switch returns a CoA-NAK message with the 503 Session Context Not Found response code. If a valid and authenticated request is received from a configured CoA client and the bounce port capability is administratively disabled, a CoA-NAK response is returned with 501 Administratively Prohibited response code. If it expected that more than one session will authenticate over a port, use of multi-auth or multi-domain host mode authentication is recommended. Command History Introduced in version 6.2.0.1 firmware. Example The following example configures RADIUS servers at 1.1.1.1, 2.2.2.2, and 3.3.3.3 and CoA clients at 4.4.4.4 and 5.5.5.5. It sets the front panel ports to use multi-auth authentication. CoA is configured for two dynamic RADIUS servers located at 1.1.1.1 and 2.2.2.2 using a global shared secret and a third server using a server specific shared secret. CoA and disconnect requests are accepted from the CoA clients at 4.4.4.4 and 5.5.5.5. Any attribute contained in the Disconnect request is allowed for session identification. In this example, the NAS-IP-Address is optionally configured at the fixed IPv4 address of 3.3.3.3. CoA client 5.5.5.5 uses the global server key while client 4.4.4.4 uses a client-specific server key. console#configure terminal console(config)# aaa new-model console(config)# aaa authentication dot1x default radius Security Commands 942