Sync problem solved.
What are the CPPM and switch requirements for CoA actions?
On the switch set:
radius-server host 192.168.1.100 "strong_pass"
radius-server host 192.168.1.100 dyn-authorization
radius-server host 192.168.1.100 time-window 0
On CPPM set:
switch added to the device list,
Vendor Name: Hewlett-Packard-Enterprise,
Enable RADIUS Dynamic Authorization: Port: 3799,
Enable Insight
Switches and cluster CPPM uses the same NTP server.
Are any additional settings I didn't mention required?