Change of Authorization | Catalyst 2960

[Cisco Support]

Hi team,

Change of Authority - Port bounce, not working on host-mode multi-domain fast ethernet interface.

Unfortunate to say that the company I'm working for still has a few Cisco Catalyst 2960 series switches running on 15.0 firmware version. I am using Aruba ClearPass as the NAC.

Parameters passed: Audit Session ID (Cisco AV Pair), Calling station ID, NAS IP address, Port bounce (Cisco AV Pair). The same set of CoA parameters worked for the Cisco 1300 series switch. Is there any Cisco documentation for which parameters should be sent to the switch?

Regards,
Manul

[balaji.bandi]

Normal standard configuraiton should work can you post config bit and show output

most time uses port - CoA is 1700 or 3799

show running-config
show aaa servers
show dot1x <interface_name> details

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960xr/software/15-2_5_e/configuration_guide/b_1525e_consolidated_2960xr_cg/b_1525e_consolidated_2960xr_cg_chapter_0110010.pdf

also check this post may help you :

https://airheads.hpe.com/discussion/clearpass-and-cisco-coa-failing#:~:text=12:58%20PM-,The%20dynamic%20author%20commands%20look%20correct%20but%20Cisco%20default%20for,No%20response%20from%20network%20device

[Leo Laohoo]

What is the exact firmware of the 2960?

What is the Dot1X port configuration?