cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1222
Views
0
Helpful
1
Replies

ISE sessions: state machine

Michal Garcarz
Cisco Employee
Cisco Employee

Hello Team,

Do we have any info on state machine for sessions on MNT ?

I would like to know:

- for how long the session will be maintained in Authenticated state if no accounting messages are sent (was it 5 days ? configurable ?)

- what is the difference between Started and Authenticated status ? (I have feelings it's not just accounting message?)

 

Thanks,

Michal

1 Accepted Solution

Accepted Solutions

howon
Cisco Employee
Cisco Employee

If ISE receives RADIUS authentication request and:

- If no accounting message is received, ISE maintains session for 1 hour.

- If accounting message is received, ISE maintains session for 5 days or until accounting stop is received. Receiving interim update will renew the 5 day period.

Above settings are hard coded.

 

Started session means ISE received matching accounting start message.

Authenticated session means ISE got authentication request without accounting message.

View solution in original post

1 Reply 1

howon
Cisco Employee
Cisco Employee

If ISE receives RADIUS authentication request and:

- If no accounting message is received, ISE maintains session for 1 hour.

- If accounting message is received, ISE maintains session for 5 days or until accounting stop is received. Receiving interim update will renew the 5 day period.

Above settings are hard coded.

 

Started session means ISE received matching accounting start message.

Authenticated session means ISE got authentication request without accounting message.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: