topic Re: Cisco ISE 2.7 Patch4 Concurrent Sessions Limit Log in Network Access Control

Cisco ISE 2.7 Patch4 Concurrent Sessions Limit Log

david.matta — Fri, 08 Oct 2021 09:11:47 GMT

Hi,

I'm running an installation of Cisco ISE 2.7 patch4, (which, is documented to fix CSCvv14390 - Concurrent sessions not working).

The limiting of concurrent session now works, which is fine.

However, I'm noticing that on the next attempted session to a device, I don't get any log.

No Authentication Attempt, and certainly no Authorization log.

Previously, I'd have seen a message to say that max sessions had been hit and authorization was denied.

Is this a known issue? Or does anyone know why this may be?

Thanks in advance.

Re: Cisco ISE 2.7 Patch4 Concurrent Sessions Limit Log

Marcelo Morais — Fri, 08 Oct 2021 11:41:35 GMT

Hi @david.matta ,

if you are not seeing successful Authentication, please double check the following configuration :

Administration > System > Settings > Protocols > RADIUS: Suppress repeated successful authentications.

Hope this helps !!!

Re: Cisco ISE 2.7 Patch4 Concurrent Sessions Limit Log

david.matta — Fri, 08 Oct 2021 12:58:16 GMT

Hi @Marcelo Morais

Thank you for your reply, it's appreciated.

I have now set the setting you suggested, however, do note, the reports I'm looking for are for AAA authentication (TACACS+) not RADIUS.

Regards,

Re: Cisco ISE 2.7 Patch4 Concurrent Sessions Limit Log

poongarg — Sun, 10 Oct 2021 06:05:39 GMT

Maximum session per user is for both RADIUS, TACACS sessions combined. Check the RADIUS live logs to confirm if the same user also tried RADIUS authentication and got the report in RADIUS for max session limit reached.

Re: Cisco ISE 2.7 Patch4 Concurrent Sessions Limit Log

david.matta — Mon, 11 Oct 2021 09:04:24 GMT

Hi,

Thanks for the suggestion. however, no RADIUS reports are presented during any of the login attempts, including the exceeded session login attempt.

Re: Cisco ISE 2.7 Patch4 Concurrent Sessions Limit Log

david.matta — Tue, 12 Oct 2021 13:32:03 GMT

Hi,

Does anyone know whether this is a known issue before I consider raising a TAC case?

Thanks

Re: Cisco ISE 2.7 Patch4 Concurrent Sessions Limit Log

david.matta — Tue, 19 Oct 2021 09:41:19 GMT

Sorry to bump, but does anyone know if this is a known issue before I raise a TAC?

Thank you.