ISE sessions: state machine

Michal Garcarz — Fri, 07 Sep 2018 06:40:53 GMT

Hello Team,

Do we have any info on state machine for sessions on MNT ?

I would like to know:

- for how long the session will be maintained in Authenticated state if no accounting messages are sent (was it 5 days ? configurable ?)

- what is the difference between Started and Authenticated status ? (I have feelings it's not just accounting message?)

Thanks,

Michal

Re: ISE sessions: state machine

howon — Fri, 07 Sep 2018 20:59:13 GMT

If ISE receives RADIUS authentication request and:

- If no accounting message is received, ISE maintains session for 1 hour.

- If accounting message is received, ISE maintains session for 5 days or until accounting stop is received. Receiving interim update will renew the 5 day period.

Above settings are hard coded.

Started session means ISE received matching accounting start message.

Authenticated session means ISE got authentication request without accounting message.

topic ISE sessions: state machine in Network Access Control

ISE sessions: state machine

Re: ISE sessions: state machine