how to set authentication session timeout with auth profile

naogawa — Thu, 15 Jun 2017 08:12:48 GMT

I configure authorization profile using attribute below to set session timeout.

but it is not reflected to the session.

Could you help me if I miss anything?

Cat2960X-Edge-TK-Kotei#$essions interface gigabitEthernet 1/0/13 details

Interface: GigabitEthernet1/0/13

MAC Address: 000c.2994.e139

IPv6 Address: Unknown

IPv4 Address: 192.168.200.38

User-Name: 00-0C-29-94-E1-39

Status: Authorized

Domain: DATA

Oper host mode: multi-auth

Oper control dir: both

Session timeout: N/A <<<<<<<<<<<<<<< I want to set it

Restart timeout: N/A

Session Uptime: 4s

Common Session ID: C0A86464000097ABABDADD2B

Acct Session ID: Unknown

Handle: 0xD80000A0

Current Policy: POLICY_Gi1/0/13

Local Policies:

Service Template: DEFAULT_LINKSEC_POLICY_SHOULD_SECURE (priority 150)

Server Policies:

Vlan Group: Vlan: 200

Method status list:

Method State

mab Authc Success

Re: how to set authentication session timeout with auth profile

paul — Thu, 15 Jun 2017 13:12:00 GMT

There are two commands required for reauth timeouts from ISE to be allowed by the switch (in addition to all the other interface commands):

authentication periodic

authentication timer reauthenticate server

Do you have both of those?

naogawa — Thu, 15 Jun 2017 14:53:02 GMT

Thank you so much.

it works well after I added two commands under interface configuration.