HPE7-A01 · Question #30
The administrator notices that wired guest users that have exceeded their bandwidth limit are not being disconnected Access Tracker in ClearPass indicates a disconnect CoA message is being sent to…
The correct answer is A. Change of Authorization has not been globally enabled on the switch. Change of Authorization (CoA) is a feature that allows ClearPass Policy Manager (CPPM) to send messages to network devices such as switches to change the authorization state of a user session. CoA requires that both CPPM and the network device support this feature and have it…
Question
The administrator notices that wired guest users that have exceeded their bandwidth limit are not being disconnected Access Tracker in ClearPass indicates a disconnect CoA message is being sent to the AOS-CX switch. An administrator has performed the following configuration What is the most likely cause of this issue?
Exhibit
Options
- AChange of Authorization has not been globally enabled on the switch
- BThe SSL certificate for CPPM has not been added as a trust point on the switch
- CThere is a mismatch between the RADIUS secret on the switch and CPPM.
- DThere is a time difference between the switch and the ClearPass Policy Manager
How the community answered
(33 responses)- A42% (14)
- B6% (2)
- C33% (11)
- D18% (6)
Explanation
Change of Authorization (CoA) is a feature that allows ClearPass Policy Manager (CPPM) to send messages to network devices such as switches to change the authorization state of a user session. CoA requires that both CPPM and the network device support this feature and have it enabled. For AOS-CX switches, CoA must be globally enabled using the command radius-server coa enable. If CoA is not enabled on the switch, the disconnect CoA message from CPPM will be ignored and the user session will not be terminated.
Topics
Community Discussion
No community discussion yet for this question.