Fortinet black logo
9.4.0

Change of Authorization (CoA)

Change of Authorization (CoA)

  1. Click the Configuration tab.

  2. Under Policy Configuration, click Advanced Configuration, and then select

    Authentication.

  3. Click AAA Client Settings.

  4. Click the server name.

  5. Enable RADIUS accounting. (Server Type = Auth/Acct, Accounting Port = 1813)

  6. Expand Optional Settings (not supported by RADIUS Proxy).

  7. Set the Accounting Interim Update Interval to at least 600 or higher. FortiNAC does not use the Interim Update messages. However, AP’s generating them too frequently can cause a needless burden on the appliance as each accounting message is processed prior to discarding. If RADIUS accounting messages are being forwarded to a production accounting server, the interval should be set according to those considerations.

    AerohiveNG: This option is located in the AAA configuration by clicking a small gear icon.

  8. Select the Permit Dynamic Change of Authorization Messages check box.

    AerohiveNG: This option is located in the AAA configuration by clicking a small gear icon.

AerohiveNG

Change of Authorization (CoA)

  1. Click the Configuration tab.

  2. Under Policy Configuration, click Advanced Configuration, and then select

    Authentication.

  3. Click AAA Client Settings.

  4. Click the server name.

  5. Enable RADIUS accounting. (Server Type = Auth/Acct, Accounting Port = 1813)

  6. Expand Optional Settings (not supported by RADIUS Proxy).

  7. Set the Accounting Interim Update Interval to at least 600 or higher. FortiNAC does not use the Interim Update messages. However, AP’s generating them too frequently can cause a needless burden on the appliance as each accounting message is processed prior to discarding. If RADIUS accounting messages are being forwarded to a production accounting server, the interval should be set according to those considerations.

    AerohiveNG: This option is located in the AAA configuration by clicking a small gear icon.

  8. Select the Permit Dynamic Change of Authorization Messages check box.

    AerohiveNG: This option is located in the AAA configuration by clicking a small gear icon.

AerohiveNG