CnnEouState

• Base type Enumeration

Describes the EOU state. initialize(1) Indicates that the EOU state is in initialization. State machine enters this state when a new IP has been learned on the port. Cleanup of the port configuration also force entering this state. When entering this state, the followings action take place: - any previously configured policy are removed - frees up any previously allocated memory - does a UCT to 'hello' state. hello(2) Indicates that the EOU state is in hello state. In this state the device sends a hello message to get the association ID of the CTA and also to check whether a CTA exists at all. The device starts the hello timer and waits till that time and if it doesn't get a response, it retransmits the hello requests for max-retry times before it declares the host as 'clientless'. clientless(3) Indicates that the EOU state is in client-less state. State machine enters this state when hello response is not reached and in this state the device does a pseudo authentication to download the policy for Non-Responsive hosts and stays in this state. eapRequest(4) Indicates that the EOU state is in EAP request state. In this state, the device sends EAP validate requests to the CTA and awaits response from the CTA, it starts the retransmit timeout and if response is not received before that timer expires, it retransmits the EAP requests. response(5) Indicates that the EOU state is in EAP response state. State machine enters this state when a response for the EAP validate request is received from the CTA. Device then builds a RADIUS request incorporating the EAP packet and sends it to the ACS and awaits response from the ACS. If the response from the ACS is an access challenge it moves the port the 'eapRequest' state. But if it's a success, port is moved to 'authenticated' state. If its Access- Reject, port is moved to 'fail' state. authenticated(6) Indicates that the EOU state is in authenticated state. In this state policy installation happens and port remains in this state until revalidation event is triggered because of session timer expiry or when status query fails. Status query generation and response reception happens in this state only. fail(7) Indicates that the EOU state is in failed state. When posture validation fails, system start the hold timer and device waits till it expires before trying for posture validation again. abort(8) Indicates that the EOU state is in abort state. State machine enters this state because of failing to complete posture validation due to lack of response from CTA/RADIUS or any other reason. aaaFail(9) Indicates that the EOU state is in AAA failed state. State machine enters this state when RADIUS requests to AAA server timeouts either due to the server not being reachable or is down. hold(10) Indicates that the EOU state is in hold state. This state represents the quiet or idle state for the host. The host is put in the hold state on events like hello response is not received or the AAA server is not reachable. Host remains in this state for hold the EOU hold timeout period. client(11) Indicates that the EOU state is in client state. This state is reached when the host sends a response to EOU hello request from the authenticating device. This state indicates the presence of CTA on the device. server(12) Indicates that the EOU state is in server state. This state represents that the authenticating device is communicating with the AAA (RADIUS) server. This state is reached when host send an EOU response.