topic Re: Cisco Authentication &quot;Periodic Acct timeout&quot; ? in Network Access Control https://community.cisco.com/t5/network-access-control/cisco-authentication-quot-periodic-acct-timeout-quot/m-p/3446088#M527539 <HTML><HEAD></HEAD><BODY><P>I have not validated in my own lab, but looks like it may be the result of following...</P><P></P><P>switch(config)# aaa accounting update [newinfo] [ <STRONG>periodic</STRONG> number [ jitter maximum max-value ] ] </P><P></P><P>The accounting periodic interval cannot be set via RADIUS.&nbsp; The more common settings set via RADIUS would be the RADIUS session timer and idle/inactivity timer.</P><P></P><P>Craig</P></BODY></HTML> Fri, 18 Aug 2017 21:07:52 GMT Craig Hyps 2017-08-18T21:07:52Z Cisco Authentication "Periodic Acct timeout" ? https://community.cisco.com/t5/network-access-control/cisco-authentication-quot-periodic-acct-timeout-quot/m-p/3446087#M527536 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P>In some last IOS versions we can see a new field in this verification command for Authentification :</P><P></P><P>I would like to know, what is this new "Timer" and how to configure it (By Switch or Radius Attribute send by ISE). I don't find documentation.</P><P></P><P>SWITCH#<STRONG>show authentication sessions int gi1/0/19 details</STRONG></P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface:&nbsp; GigabitEthernet1/0/19</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IIF-ID:&nbsp; 0x104E1C000000126</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MAC Address:&nbsp; 00b5.10ea.5048</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IPv6 Address:&nbsp; Unknown</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IPv4 Address:&nbsp; 10.10.80.6</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; User-Name:&nbsp; 00-B5-10-EA-50-48</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Status:&nbsp; Authorized</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Domain:&nbsp; DATA</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Oper host mode:&nbsp; multi-auth</P><P>&nbsp;&nbsp;&nbsp;&nbsp; Oper control dir:&nbsp; in</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Session timeout:&nbsp; 28800s (server), Remaining: 28612s</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Timeout action:&nbsp; Reauthenticate</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Restart timeout:&nbsp; N/A</P><P><SPAN style="color: #ff0000;"><STRONG>Periodic Acct timeout:&nbsp; N/A</STRONG></SPAN></P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Session Uptime:&nbsp; 211s</P><P>&nbsp;&nbsp;&nbsp; Common Session ID:&nbsp; 0000000000000FFB0A394072</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Acct Session ID:&nbsp; 0x00000FF1</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Handle:&nbsp; 0x1F000038</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Current Policy:&nbsp; POLICY_Gi1/0/19</P><P></P><P>Local Policies:</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Service Template: DEFAULT_LINKSEC_POLICY_SHOULD_SECURE (priority 150)</P><P></P><P>Server Policies:</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Idle timeout:&nbsp; 120 sec</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Vlan Group:&nbsp; Name: INTERNET, Vlan: 520</P><P></P><P>Method status list:</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Method&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; State</P><P></P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; dot1x&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Stopped</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; mab&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Authc Success</P></BODY></HTML> Fri, 18 Aug 2017 12:24:22 GMT https://community.cisco.com/t5/network-access-control/cisco-authentication-quot-periodic-acct-timeout-quot/m-p/3446087#M527536 jean1 2017-08-18T12:24:22Z Re: Cisco Authentication "Periodic Acct timeout" ? https://community.cisco.com/t5/network-access-control/cisco-authentication-quot-periodic-acct-timeout-quot/m-p/3446088#M527539 <HTML><HEAD></HEAD><BODY><P>I have not validated in my own lab, but looks like it may be the result of following...</P><P></P><P>switch(config)# aaa accounting update [newinfo] [ <STRONG>periodic</STRONG> number [ jitter maximum max-value ] ] </P><P></P><P>The accounting periodic interval cannot be set via RADIUS.&nbsp; The more common settings set via RADIUS would be the RADIUS session timer and idle/inactivity timer.</P><P></P><P>Craig</P></BODY></HTML> Fri, 18 Aug 2017 21:07:52 GMT https://community.cisco.com/t5/network-access-control/cisco-authentication-quot-periodic-acct-timeout-quot/m-p/3446088#M527539 Craig Hyps 2017-08-18T21:07:52Z