03-27-2024 12:36 PM
Hello all,
When looking at show auth sessions int gx/x detail , I see a field called acct update timeout , and ours is set to 300 seconds with a countdown timer.
My questions are:
You can see the Acct update timeout field from the output below:
sw1#show auth sessions int g2/0/9 det
Interface: GigabitEthernet2/0/9
IIF-ID: 0x1234ABCD
MAC Address: 1234.5678.9012
IPv6 Address: Unknown
IPv4 Address: x.x.x.x
User-Name: 12-34-56-78-90-12
Status: Authorized
Domain: DATA
Oper host mode: multi-auth
Oper control dir: both
Session timeout: N/A
Acct update timeout: 300s (local), Remaining: 7s
Common Session ID: 1234567890ABCDEFGHIJKLMN
Acct Session ID: 0x00001234
Handle: 0x12340000
Current Policy: POLICY_Gi2/0/9
Local Policies:
Service Template: DEFAULT_LINKSEC_POLICY_SHOULD_SECURE (priority 150)
Security Policy: Should Secure
Server Policies:
Filter-ID: ACL-ALLOW
Method status list:
Method State
dot1x Stopped
mab Authc Success
sw1#
Solved! Go to Solution.
03-27-2024 12:51 PM
@vv0bbLeS that is to send a periodic accounting update to RADIUS every 300 seconds to keep the session alive, the recommendation is to send every 2880 minutes (172,800 seconds).
03-27-2024 12:44 PM
The NAD send account info to AAA
Either periodic (here timeout use) or newinfo.
aaa accounting update [newinfo] [periodic number [jitter maximum max-value]]
MHM
03-27-2024 12:51 PM
@vv0bbLeS that is to send a periodic accounting update to RADIUS every 300 seconds to keep the session alive, the recommendation is to send every 2880 minutes (172,800 seconds).
03-27-2024 05:22 PM
@MHM Cisco World and @Rob Ingram thank you both for your answers! That's exactly what I needed to know! : )
03-28-2024 06:54 AM
You are so so welcome
MHM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide