Solved: Cisco ISE Idle Timeout

Freemen · ‎12-19-2019

Hi all,

the idle timeout does it mean the switch port not seen any packet from the port for x number of minute then it will session terminate?

anyway to simulate idle timeout?

even a normal pc not running any application, but still got some background traffic on the LAN port right?

Colby LeMaire · ‎12-19-2019

That is correct! If the switchport doesn't see any packets for the amount of time configured, then it will terminate the session. This feature is intended for those situations where clients are plugged behind unmanaged switches/hubs, powered transceivers, etc where the link state always stays up. You can simulate by finding an unmanaged switch or similar and after authentication, remove the PC. Since the link state doesn't go down, the sessions stays up until the idle-timer fires.

View solution in original post

Colby LeMaire · ‎12-19-2019

That is correct! If the switchport doesn't see any packets for the amount of time configured, then it will terminate the session. This feature is intended for those situations where clients are plugged behind unmanaged switches/hubs, powered transceivers, etc where the link state always stays up. You can simulate by finding an unmanaged switch or similar and after authentication, remove the PC. Since the link state doesn't go down, the sessions stays up until the idle-timer fires.