2960XR Radius CoA

[aous.salloum]

Hi Folks 

I have one customer planning to deploy NAC ( ISE or Clearpass ) to have each customer moved to a separate vlan after web authentication using the wired network 

The switches are 2960XR 

Will they support all the featutes required for this ( L3 redirect, Change of Authorization) etc 

Or we need a higher switch model ! 

Thank you. 

[Austin Sabio · Accepted solution]

yes as long as its IP Lite image. 

•  

WCCP	(Catalyst 2960-XR | IP Lite) Support for Web Cache Communication Protocol (WCCP).

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960x/software/15-2_2_e/release_notes/OL-32568.html

• "RADIUS Change of Authorization (CoA) to change the attributes of a certain session after it is authenticated. When there is a change in policy for a user or user group in AAA, administrators can send the RADIUS CoA packets from the AAA server, such as Cisco Identity Services Engine, or Cisco Secure ACS to reinitialize authentication, and apply to the new policies."

For a complete security feature set: 

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960xr/software/15-0_2_EX1/security/configuration_guide/b_sec_152ex1_2960-xr/b_sec_152ex1_2960-xr_chapter_01.html

I hope this helps. Good luck!