
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-15-2017 01:12 AM
I configure authorization profile using attribute below to set session timeout.
but it is not reflected to the session.
Could you help me if I miss anything?
Cat2960X-Edge-TK-Kotei#$essions interface gigabitEthernet 1/0/13 details
Interface: GigabitEthernet1/0/13
MAC Address: 000c.2994.e139
IPv6 Address: Unknown
IPv4 Address: 192.168.200.38
User-Name: 00-0C-29-94-E1-39
Status: Authorized
Domain: DATA
Oper host mode: multi-auth
Oper control dir: both
Session timeout: N/A <<<<<<<<<<<<<<< I want to set it
Restart timeout: N/A
Session Uptime: 4s
Common Session ID: C0A86464000097ABABDADD2B
Acct Session ID: Unknown
Handle: 0xD80000A0
Current Policy: POLICY_Gi1/0/13
Local Policies:
Service Template: DEFAULT_LINKSEC_POLICY_SHOULD_SECURE (priority 150)
Server Policies:
Vlan Group: Vlan: 200
Method status list:
Method State
mab Authc Success
Solved! Go to Solution.
- Labels:
-
Identity Services Engine (ISE)
Accepted Solutions

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-15-2017 06:12 AM
There are two commands required for reauth timeouts from ISE to be allowed by the switch (in addition to all the other interface commands):
authentication periodic
authentication timer reauthenticate server
Do you have both of those?

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-15-2017 06:12 AM
There are two commands required for reauth timeouts from ISE to be allowed by the switch (in addition to all the other interface commands):
authentication periodic
authentication timer reauthenticate server
Do you have both of those?

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-15-2017 07:53 AM
Thank you so much.
it works well after I added two commands under interface configuration.
