12929 NAS sends RADIUS accounting update messages too frequently

[alliasneo1]

Hi, I have a new problem today. I am seeing this from all the switches that are running ISE. How can I fix this?

[Cristian Matei]

Hi,

   Disable RADIUS interim accounting or set it to a higher value, as well as configure ISE suppression under "Administration -> System -> Settings -> Protocols -> RADIUS".

    Check this document as well, for further reference: https://community.cisco.com/t5/security-knowledge-base/ise-data-limiting-best-practices/ta-p/4310073

Best,

Cristian.

[alliasneo1]

I have the defaults set in ISE:

When you say - Disable RADIUS interim accounting or set it to a higher value - What do you mean here? on the switch?

[ammahend]

You can set something like “aaa accounting update newinfo periodic 2880” on the switch, this is for 48 hours but you can set time accordingly . 

[Cristian Matei]

Hi,

   Yes, on the switch.

Best,

Cristian.

[MHM Cisco World]

"aaa accounting update periodic 15" <<- add this in SW

MHM

[alliasneo1]

Thanks I will try this

[MHM Cisco World]

Believe me What i suggest is only workaround.

We need to know why SW start authc endpoint many times.

Do you have any up/down interface log ?

MHM