Cisco Authentication "Periodic Acct timeout" ?

[jean1]

Hello,

In some last IOS versions we can see a new field in this verification command for Authentification :

I would like to know, what is this new "Timer" and how to configure it (By Switch or Radius Attribute send by ISE). I don't find documentation.

SWITCH#show authentication sessions int gi1/0/19 details

            Interface:  GigabitEthernet1/0/19

               IIF-ID:  0x104E1C000000126

          MAC Address:  00b5.10ea.5048

         IPv6 Address:  Unknown

         IPv4 Address:  10.10.80.6

            User-Name:  00-B5-10-EA-50-48

               Status:  Authorized

               Domain:  DATA

       Oper host mode:  multi-auth

     Oper control dir:  in

      Session timeout:  28800s (server), Remaining: 28612s

       Timeout action:  Reauthenticate

      Restart timeout:  N/A

Periodic Acct timeout:  N/A

       Session Uptime:  211s

    Common Session ID:  0000000000000FFB0A394072

      Acct Session ID:  0x00000FF1

               Handle:  0x1F000038

       Current Policy:  POLICY_Gi1/0/19

Local Policies:

        Service Template: DEFAULT_LINKSEC_POLICY_SHOULD_SECURE (priority 150)

Server Policies:

         Idle timeout:  120 sec

           Vlan Group:  Name: INTERNET, Vlan: 520

Method status list:

       Method           State

       dot1x            Stopped

       mab              Authc Success

[Craig Hyps · Accepted solution]

I have not validated in my own lab, but looks like it may be the result of following...

switch(config)# aaa accounting update [newinfo] [ periodic number [ jitter maximum max-value ] ]

The accounting periodic interval cannot be set via RADIUS.  The more common settings set via RADIUS would be the RADIUS session timer and idle/inactivity timer.

Craig