cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1360
Views
0
Helpful
2
Replies

cisco ISE usage quotas

k.abillama
Beginner
Beginner

Hi All,

I need to know if usage quotas are supported on cisco ISE, after doing some researches I found that it was supported on ACS 4.x and remoced from ACS 5.x. In bried, we need to be able to assign and track volume and time based quotas for users accessing either via switches, WLC or remotely

Regards,

2 Replies 2

Eduardo Aliaga
Enthusiast
Enthusiast

Afaik there's no quota, but I think you could use a little trick (and I remark I'm guessing a little here)

You can configure ACcess Settings > Max Session  User Settings

And then you can configre System Administration > Max User Session Global Settings > Max User Session Timeout

Max User Session Timeout Settings

Unlimited Session Timeout

No timeout.

Max User Session Timeout

Once the session timeout is reached, ACS sends a fake STOP  packet to close the respective session and update the session count.

Note The user is not  enforced to logout in the device.

So I guess if you want a "quota" of 3 hours you can configure "max user session timeout" of 1 hour and set "Max session user setting" of 3.

But if you logout I guess the "quota" reverts to zero, so there's no "acummulative quota". I repeat I'm guessing here, sadly I don't have time right now to test it.

Kind regards

Thank You and is there a way to see it by volume usage through accounting?

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers