cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
 
Register for the monthly ISE Webinars to learn about ISE configuration and deployment.
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

117
Views
0
Helpful
2
Replies
Beginner

Cisco ISE 2.6 sessions not clearing after accounting STOP

I tested using both Cisco ISE 2.4 (patch 9) and Cisco ISE 2.6 (patch 1). I have a user who successfully authenticated via RADIUS against ISE. Under ISE, Operations > Live Logs (and Live sessions), I see the user authenticated. After the accounting request packet arrives from the RADIUS client to ISE, and, after the Acct-Status-Type = "START," under Live Sessions, I see the state of the endpoint as STARTED (under Session Status). After the user disconnects, the ISE receives an Accounting request packet of type = "STOP." Once the ISE receives the accounting stop, the ISE does not move the session state from "STARTED" to "DISCONNECTED." The session is still showing as "STARTED" under Live Sessions logs. This does not look right at all. Do you have any recommendations as to why the session state remains as "STARTED"?

 

Identity Services Engine 2019-09-21 01-36-55.png

1 ACCEPTED SOLUTION

Accepted Solutions
VIP Advocate

Re: Cisco ISE 2.6 sessions not clearing after accounting STOP

I haven't had the same experience with 2.4 p9. Are you using Cisco NADs, if so, then which platform and IOS?

My first thought is that the NAD is sending the accounting stop with a bad format. ex. missing the calling station id attribute.
2 REPLIES 2
VIP Advocate

Re: Cisco ISE 2.6 sessions not clearing after accounting STOP

I haven't had the same experience with 2.4 p9. Are you using Cisco NADs, if so, then which platform and IOS?

My first thought is that the NAD is sending the accounting stop with a bad format. ex. missing the calling station id attribute.
Cisco Employee

Re: Cisco ISE 2.6 sessions not clearing after accounting STOP

Like Damien Miller said, it could be specific to the NAD or how it configured.

If Cisco wired or wireless NADs, be sure to follow the prescriptive guides: