How to restrict concurrent session user on Cisco ISE

[jewfcb001]

Hi All ,

I try to restrict concurrent session user on ise , I adjust configuration following below. But user still can connect more than 1 session of same user . How can configure for restrict concurrent session.?

[ahollifield]

Is RADIUS accounting properly configured?

[jewfcb001]

@ahollifield 

Thank you for response.

Do you mean configuration on firewall ? what is the command that you mention ?

[ahollifield]

On the NAD (Network Access Device).  Speaking of, this is wireless, wired, VPN, something else?

[jewfcb001]

@ahollifield 

I do cisco asav for VPN Access . Can you provide command accounting for me ?

[ahollifield]

accounting-mode simultaneous

interim-accounting-update [periodic [hours]]

Within the AAA Server group.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/general/asa-96-general-config/aaa-radius.html

[jewfcb001]

@ahollifield 

Thank you for answer .  I have a small question. For Max Concurrent session that configure on Cisco ISE . Can I deploy with another VPN Gateway ?

[Mohammed al Baqari]

Hi,

Have you unchecked the box 'Unlimited sessions per user'?

https://community.cisco.com/t5/network-access-control/ise-v3-0-max-concurent-sessions/td-p/4413212

***** please remember to rate useful posts

[jewfcb001]

@Mohammed al Baqari 

Hi Mohammed ,

This configuration can deploy with another VPN Gateway ? Ex. Fortigate/Juniper etc.

I mean max concurrent session .