FMC pxGrid Losing User to IP Mappings

[paul]

I have my customer's FMC integrated with ISE via pxGrid and they are able to write user/AD group based rules.  The rules will work for a while then at some point it seems like FMC loses/times out the User to IP information.

The timeouts on the FMC side as as follows:

I have reauthentication timers set on my Dot1x rules in ISE for 65,000 seconds.  So my reauthentication timers are less than the user session timeouts in FMC.  Why would FMC be losing user to IP info?

Does ISE send updated pxGrid info on a reauth?

[jeppich · Accepted solution]

Hey Paul,

It is best to open a TAC case, what versions of ISE & FMC are you using?

Please send me an email directly and i will schedule a call with you and FMC development.

Thanks,

John

jeppich@cisco.com