1.2.14. Change of Authorization

RADIUS Change of Authorization (CoA) allows a RADIUS server to send unsolicited messages to the Network Access Server to change the connected client’s authorized state. This could mean disconnecting the client, sending different attribute-value pairs to the Authenticator, changing the device’s VLAN/ACL, and more.

This feature will allow OpenNAC Core to send disconnection requests on the discovered devices, allowing it to force re-authentication. If a user device is re-authenticated the plugins will be executed and the information obtained through them will be updated.

../../../_images/UNAC_introduction-9.png