PEAP with MAR aging time issue - ISE 2.3 patch 5

[anilkumar.cisco]

Hello Team,

We are facing issue with MAR age out issue..

MAR aging time has been set for 37 hours with PEAP authentication.

We are facing issue with user unauthenticated.

After reboot the issue resolved.. but we are looking for expert advise in order to mitigate this issue..

Any special recommendation 

[thomas · Accepted solution]

Use TEAP if you are worried about MAR Cache - it is designed to prevent the problems created by caching machine credentials!

https://cs.co/ise-resources :

• TEAP for Windows 10 using Group Policy and ISE TEAP Configuration
• EAP Chaining with TEAP

TEAP requires ISE 2.7 and Windows 10 20H1.