Limit the number of session per user in the Wired dot1x environment with ISE 1.2

[Ahmad Murad]

Hello,

I need to check if there is any configuration/workaround to limit the number of sessions/access per user in the Wired dot1x configuration.

I need to check if this feature is available or not to solve the following scenario:

I have 2 SW ports configured to use dot1x authentication with ISE 1.2 server.

If user A connects to the 1st port and authenticated then he will placed on a VLAN based on the authorization profile.

The case, that I need to deny the same user to connect on a different machine with the same credentials.

The ISE itself does not have this feature currently,  the only feature available is to limit the number of sessions for the guest user.

Is there any workaround on the Cisco switches to solve this? Cisco WLC has this feature and for the VPN we can limit the number of sessions also from the ASA itself.

Thanks.

[Naveen Kumar]

limit of the number of simultaneous session per user is not in ISE 1.2

[deepuvarghese1]

Is this feature available for 1.3 for limiting the wired sessions?.

[Ahmad Murad]

No, you don't have this feature on 1.3

[deepuvarghese1]

Thank you Ahmad for the update..

[Venkatesh Attuluri]

limit number of session per user using wired dot1x is not available in 1.3