https://community.cisco.com/t5/network-access-control/ise-peap-retries-exclusion-reauthentication/m-p/2641757#M73878 <P>I cannot find anything in the ISE user manual that describes the behaviour when a client fails authentication after a number of failed authentications,. Lab trials are somewhat inconclusive!</P><P>Eg After 3 failed logins during a rolling 30 minute window I want client to be excluded for 30 mins before he can try again.</P><P>&nbsp;</P><P><STRONG><EM>Policy &gt; Policy Elements &gt; Results</EM></STRONG> shows:</P><P><STRONG>Allow EAP-MS-CHAPv2:</STRONG> <EM>Retry Attempts</EM>—"Specifies how many times Cisco ISE requests user credentials before returning login failure". Valid values are 1 to 3.'</P><P>&nbsp;</P><P>What governs the window, time recovery and where can I see an excluded client that has failed this way?</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Mon, 11 Mar 2019 05:34:58 GMT Sir Chris 2019-03-11T05:34:58Z https://community.cisco.com/t5/network-access-control/ise-peap-retries-exclusion-reauthentication/m-p/2641757#M73878 <P>I cannot find anything in the ISE user manual that describes the behaviour when a client fails authentication after a number of failed authentications,. Lab trials are somewhat inconclusive!</P><P>Eg After 3 failed logins during a rolling 30 minute window I want client to be excluded for 30 mins before he can try again.</P><P>&nbsp;</P><P><STRONG><EM>Policy &gt; Policy Elements &gt; Results</EM></STRONG> shows:</P><P><STRONG>Allow EAP-MS-CHAPv2:</STRONG> <EM>Retry Attempts</EM>—"Specifies how many times Cisco ISE requests user credentials before returning login failure". Valid values are 1 to 3.'</P><P>&nbsp;</P><P>What governs the window, time recovery and where can I see an excluded client that has failed this way?</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Mon, 11 Mar 2019 05:34:58 GMT https://community.cisco.com/t5/network-access-control/ise-peap-retries-exclusion-reauthentication/m-p/2641757#M73878 Sir Chris 2019-03-11T05:34:58Z