cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
7454
Views
5
Helpful
2
Replies

how to set authentication session timeout with auth profile

naogawa
Cisco Employee
Cisco Employee

I configure authorization profile using attribute below to set session timeout.

but it is not reflected to the session.


スクリーンショット 2017-06-15 午後5.10.53.png


Could you help me if I miss anything?


Cat2960X-Edge-TK-Kotei#$essions interface gigabitEthernet 1/0/13 details

            Interface:  GigabitEthernet1/0/13

          MAC Address:  000c.2994.e139

         IPv6 Address:  Unknown

         IPv4 Address:  192.168.200.38

            User-Name:  00-0C-29-94-E1-39

               Status:  Authorized

               Domain:  DATA

       Oper host mode:  multi-auth

     Oper control dir:  both

      Session timeout:  N/A   <<<<<<<<<<<<<<< I want to set it

      Restart timeout:  N/A

       Session Uptime:  4s

    Common Session ID:  C0A86464000097ABABDADD2B

      Acct Session ID:  Unknown

               Handle:  0xD80000A0

       Current Policy:  POLICY_Gi1/0/13

Local Policies:

  Service Template: DEFAULT_LINKSEC_POLICY_SHOULD_SECURE (priority 150)

Server Policies:

           Vlan Group:  Vlan: 200

         

Method status list:

      Method            State

      mab                Authc Success

1 Accepted Solution

Accepted Solutions

paul
Level 10
Level 10

There are two commands required for reauth timeouts from ISE to be allowed by the switch (in addition to all the other interface commands):

authentication periodic

authentication timer reauthenticate server

Do you have both of those?

View solution in original post

2 Replies 2

paul
Level 10
Level 10

There are two commands required for reauth timeouts from ISE to be allowed by the switch (in addition to all the other interface commands):

authentication periodic

authentication timer reauthenticate server

Do you have both of those?

naogawa
Cisco Employee
Cisco Employee

Thank you so much.

it works well after I added two commands under interface configuration.