ISE sessions: state machine

[Michal Garcarz]

Hello Team,

Do we have any info on state machine for sessions on MNT ?

I would like to know:

- for how long the session will be maintained in Authenticated state if no accounting messages are sent (was it 5 days ? configurable ?)

- what is the difference between Started and Authenticated status ? (I have feelings it's not just accounting message?)

Thanks,

Michal

[howon · Accepted solution]

If ISE receives RADIUS authentication request and:

- If no accounting message is received, ISE maintains session for 1 hour.

- If accounting message is received, ISE maintains session for 5 days or until accounting stop is received. Receiving interim update will renew the 5 day period.

Above settings are hard coded.

Started session means ISE received matching accounting start message.

Authenticated session means ISE got authentication request without accounting message.