Limit of concurrent session for Network Access User in ISE 2.1

[ckumar2]

Greetings Experts,

I am working with a customer where we would like to know the limit of the concurrent session of a Network Access User (Internal ISE users) and if there is any link of account expiration or disabling of Network Access user once it reaches the limit of the maximum concurrent session. The customer is on ISE 2.1 P1

In ISE 2.2, we have the option of max session, however, we would like to confirm in ISE 2.1.

Regards

Chandan

[Timothy Abbott · Accepted solution]

Hi,

You will need to upgrade to ISE 2.2 for this feature.  You could also look into doing this at the NAD.  Please see below:  Cisco IOS Security Command Reference: Commands A to C - aaa max-sessions through algorithm [Support] - Cisco

Regards,

-Tim

[ckumar2]

Greetings,

thank you for update, as concurrent session feature is introduced in ISE 2.2, however we would like to know what was limit in ISE 2.1 & any link of concurrent session with account expiration. Customer is reluctant to make any changes in NADs (They have both switches & WLC)

Regards

Chandan

[ckumar2]

Greetings,

Any help on this will be appreciated.

Regards

Chandan

[Jason Kunst]

there is no limit on ISE2.1