06-15-2017 01:12 AM
I configure authorization profile using attribute below to set session timeout.
but it is not reflected to the session.
Could you help me if I miss anything?
Cat2960X-Edge-TK-Kotei#$essions interface gigabitEthernet 1/0/13 details
Interface: GigabitEthernet1/0/13
MAC Address: 000c.2994.e139
IPv6 Address: Unknown
IPv4 Address: 192.168.200.38
User-Name: 00-0C-29-94-E1-39
Status: Authorized
Domain: DATA
Oper host mode: multi-auth
Oper control dir: both
Session timeout: N/A <<<<<<<<<<<<<<< I want to set it
Restart timeout: N/A
Session Uptime: 4s
Common Session ID: C0A86464000097ABABDADD2B
Acct Session ID: Unknown
Handle: 0xD80000A0
Current Policy: POLICY_Gi1/0/13
Local Policies:
Service Template: DEFAULT_LINKSEC_POLICY_SHOULD_SECURE (priority 150)
Server Policies:
Vlan Group: Vlan: 200
Method status list:
Method State
mab Authc Success
Solved! Go to Solution.
06-15-2017 06:12 AM
There are two commands required for reauth timeouts from ISE to be allowed by the switch (in addition to all the other interface commands):
authentication periodic
authentication timer reauthenticate server
Do you have both of those?
06-15-2017 06:12 AM
There are two commands required for reauth timeouts from ISE to be allowed by the switch (in addition to all the other interface commands):
authentication periodic
authentication timer reauthenticate server
Do you have both of those?
06-15-2017 07:53 AM
Thank you so much.
it works well after I added two commands under interface configuration.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide