Switch AAA config for forescout

[Danfurqan]

Dear experts,

We are moving from ISE to forescout, I need the Cisco switch AAA configuration (global & interface) to allow the scenario of 

1. Limited access of endpoint while it's authenticating 

2. If host authentication is successful and Futher compliance check by forescout is passed, the host would receive a CoA from radius server to full access ACL.

If compliance check fails, the host remains in the limited ACL to remediate.

[Torbjørn]

Your switch config will most likely stay the same, assuming that you have the same functionality configured today. You will however have to define new radius server groups. See the following documentation for this: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9200/software/release/17-12/configuration_guide/sec/b_1712_sec_9200_cg/configuring_radius.html 

If you post your the output of "show run aaa" here we will be able to help you further(remember to remove any sensitive data!).