300-715 SISE: Implementing and Configuring Cisco Identity Services Engine

For Central Web Authentication, Cisco ISE uses a Change of Authorization to cause the NAD to reauthenticate the client, allowing the NAD to obtain and enforce the user’s post-login authorization attributes. Cisco documents that successful guest-portal login can trigger CoA to restart Layer 2 authentication.