08-18-2017 05:24 AM
Hello,
In some last IOS versions we can see a new field in this verification command for Authentification :
I would like to know, what is this new "Timer" and how to configure it (By Switch or Radius Attribute send by ISE). I don't find documentation.
SWITCH#show authentication sessions int gi1/0/19 details
Interface: GigabitEthernet1/0/19
IIF-ID: 0x104E1C000000126
MAC Address: 00b5.10ea.5048
IPv6 Address: Unknown
IPv4 Address: 10.10.80.6
User-Name: 00-B5-10-EA-50-48
Status: Authorized
Domain: DATA
Oper host mode: multi-auth
Oper control dir: in
Session timeout: 28800s (server), Remaining: 28612s
Timeout action: Reauthenticate
Restart timeout: N/A
Periodic Acct timeout: N/A
Session Uptime: 211s
Common Session ID: 0000000000000FFB0A394072
Acct Session ID: 0x00000FF1
Handle: 0x1F000038
Current Policy: POLICY_Gi1/0/19
Local Policies:
Service Template: DEFAULT_LINKSEC_POLICY_SHOULD_SECURE (priority 150)
Server Policies:
Idle timeout: 120 sec
Vlan Group: Name: INTERNET, Vlan: 520
Method status list:
Method State
dot1x Stopped
mab Authc Success
Solved! Go to Solution.
08-18-2017 02:07 PM
I have not validated in my own lab, but looks like it may be the result of following...
switch(config)# aaa accounting update [newinfo] [ periodic number [ jitter maximum max-value ] ]
The accounting periodic interval cannot be set via RADIUS. The more common settings set via RADIUS would be the RADIUS session timer and idle/inactivity timer.
Craig
08-18-2017 02:07 PM
I have not validated in my own lab, but looks like it may be the result of following...
switch(config)# aaa accounting update [newinfo] [ periodic number [ jitter maximum max-value ] ]
The accounting periodic interval cannot be set via RADIUS. The more common settings set via RADIUS would be the RADIUS session timer and idle/inactivity timer.
Craig
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: