A network engineer received alerts from the monitoring platform that a switch port exists with multiple sessions. RADIUS CoA using Cisco ISE must be used to address the issue. Which RADIUS CoA…

Port bounce would physically reset the port, causing unnecessary disruption to all connected devices, which is more aggressive than typically needed for policy violations.

No CoA would mean no action is taken, which fails to address the identified issue of multiple sessions on the port.

Exception is not a standard RADIUS CoA action type; it refers to a policy state, not a specific CoA command to resolve multiple sessions.

When a switch port has multiple sessions, indicating potential policy violations, a RADIUS Change of Authorization (CoA) reauthentication (reauth) is the appropriate action. This forces the device(s) on the port to re-authenticate with Cisco ISE, allowing ISE to apply updated authorization policies, which can restrict or deny access based on the identified issue without full port disruption.