cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
 
ISE 2.3 Patch 7 has been posted. This will be the last patch for the ISE 2.3 release!
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

349
Views
0
Helpful
1
Replies
Highlighted
Cisco Employee

ISE sessions: state machine

Hello Team,

Do we have any info on state machine for sessions on MNT ?

I would like to know:

- for how long the session will be maintained in Authenticated state if no accounting messages are sent (was it 5 days ? configurable ?)

- what is the difference between Started and Authenticated status ? (I have feelings it's not just accounting message?)

 

Thanks,

Michal

Everyone's tags (2)
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: ISE sessions: state machine

If ISE receives RADIUS authentication request and:

- If no accounting message is received, ISE maintains session for 1 hour.

- If accounting message is received, ISE maintains session for 5 days or until accounting stop is received. Receiving interim update will renew the 5 day period.

Above settings are hard coded.

 

Started session means ISE received matching accounting start message.

Authenticated session means ISE got authentication request without accounting message.

1 REPLY 1
Cisco Employee

Re: ISE sessions: state machine

If ISE receives RADIUS authentication request and:

- If no accounting message is received, ISE maintains session for 1 hour.

- If accounting message is received, ISE maintains session for 5 days or until accounting stop is received. Receiving interim update will renew the 5 day period.

Above settings are hard coded.

 

Started session means ISE received matching accounting start message.

Authenticated session means ISE got authentication request without accounting message.