Guest reauthentication problem in Endpoints Using Cisco ISE

[john Kgorutle]

Hi,

Guest are keeps on prompting for authentication after 5 minutes. I have enable re-authentication from the server. please help:

switchport access vlan xx
 switchport mode access
 switchport nonegotiate
 authentication control-direction in
 authentication event fail action next-method
 authentication event server dead action authorize vlan xx
 authentication event no-response action authorize vlan xx
 authentication event server alive action reinitialize
 authentication host-mode multi-auth
 authentication open
 authentication order mab dot1x webauth
 authentication priority dot1x mab webauth
 authentication port-control auto
 authentication periodic
 authentication timer reauthenticate server
 authentication violation restrict
 mab
 snmp trap mac-notification change added
 snmp trap mac-notification change removed
 dot1x pae authenticator
 dot1x timeout tx-period 5
 dot1x max-reauth-req 5
 spanning-tree portfast
 spanning-tree bpduguard enable

[nspasov]

What attributes are you returning with the Authorization Profile for the guest clients?

Thank you for rating helpful posts!

[john Kgorutle]

Session-Timeout

28800

[nspasov]

Hmm, that should be ok. What model and version of code is the switch that you are testing this with?

[john Kgorutle]

cat4500e-ENTSERVICESK9-M), Version 15.2(2)E3

[nspasov]

I was unable to located a bug/defect for that version of code. So I would suggest that you reach out to TAC for further investigation. Let us know of the outcome :)

Thank you for rating helpful posts!