topic 9800-CL: change the PMK Cache timeout in Wireless

9800-CL: change the PMK Cache timeout

mnkojima — Tue, 21 Dec 2021 18:11:26 GMT

Hello

we have a 9800-CL IOS-XE 17.3.3, and set the session timeout to 86400 seconds. However, the PMK cache lifetime is set to 1800 seconds. Can anyone advise how can I change this PMK cache timer?

Thank you

Marcos

Re: 9800-CL: change the PMK Cache timeout

Mark Elsen — Wed, 22 Dec 2021 07:36:42 GMT

- FYI : https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/16-12/config-guide/b_wl_16_12_cg/wlan-security.html

>....The PMK cache lifetime timer is used to trigger reauthentication with the client when necessary. The timer is based on the timeout value received from the AAA server or the WLAN session timeout setting.

Re: 9800-CL: change the PMK Cache timeout

mnkojima — Wed, 22 Dec 2021 12:38:06 GMT

Hello

WLAN session timeout is already set to 24 hours, but when I run "show wireless pmk-cache" I see that the PMK timeout is 1800 seconds.

Our AAA server is ISE. Where do I change this PMK caching timeout?

Thank you

Marcos