Hi
I'm running into an issue with interim accounting and ISE. I have WS-C3650-48PD (03.07.05E) NADs doing 802.1x/MAB with ISE 2.3 patch 2.
802.1x/MAB works fine but the ISE Active Endpoint total always looks a little on the low side. The NADs are configured to send interim accounting updates to ISE but after doing some debugs it looks like the NADs aren't sending any accounting packets to ISE other than start/stop.
I found the following forum post which states that bug CSCux75319 applies to 3650/3850s:
https://supportforums.cisco.com/t5/cisco-bug-discussions/cscux75319-support-for-periodic-accounting-on-3850-switches/td-p/2921423
It looks like ISE is not receiving any interim accounting packets for connected clients so ISE is gradually clearing these sessions. In the absence of interim accounting, is the best option to enable periodic re-authentication of clients?
Thanks
Andy
