RADIUS Change of Authorization (CoA)

The Cloudpath onboard RADIUS server can send CoA disconnect messages using two triggers. The first is a manual disconnect of an active connection. The second is when a certificate is revoked for a user. The Cloudpath onboard RADIUS server sends the CoA disconnect to the AP, which evaluates the authentication status of the connection.

If COA is active, the system will attempt to send COA requests. This option is only available if RADIUS is enabled and Connection Tracking is enabled on the Cloudpath system.

CoA traffic is sent over UDP port 3799.