Endpoint Demotion Configuration on CAC Failures

To configure endpoint demotion on CAC failures:

1. In Superuser mode, type configure terminal and press Enter.

   ORACLE# configure terminal
   ORACLE(configure)#

2. Type session-router and press Enter.

   ORACLE(configure)# session-router
   ORACLE(session-router)#

3. Type access-control and press Enter.

   ORACLE(session-router)# access-control
   ORACLE(access-control)#

   If you are adding this feature to an existing configuration, then you will need to select the configuration you want to edit.

4. cac-failure-threshold—Enter the number of CAC failures for any single endpoint that will demote it from the trusted queue to the untrusted queue.
5. untrust-cac-failure-threshold—Enter the number of CAC failures for any single endpoint that will demote it from the untrusted queue to the denied queue.
6. Save your work.