In the "Edit RFC 3576 Reauthentication Configuration" window, check the box "Supports Change of Authorization"
Click ok through all the previous steps
Enforce to the NAC appliance
CoA (Change of Authorization) is to be used in environments where there is not a topology flip (VLAN change) after a user authenticates from Unregistered (Unauthenticated) to an Authenticated state and role. This article can be used as a reference point to disable CoA as well if this is the case. The NAC appliance will with SNMP to reauthenticate.