Header Only - DO NOT REMOVE - Extreme Networks

Session-Timeout NAC, with EXOS, MAC Auth & Agent-Less Assessment


Userlevel 5
Hi,

In the throws of depolying a new network in a phased 1 approach of MAC auth and Informational Agent-Less assesement.

Currently clients are passing MAC auth and assessment but are throwing the following error:

Filter-Id='Enterasys:version=1:policy=Enterprise Access', Session-Timeout='604858', Termination-Action='1'



This is only for those that are doing assessment, so my assumption is that the effect of this is causing the problem.

I've seen this GTAC article that details how I can add a session timeout value:

https://gtacknowledge.extremenetworks.com/articles/How_To/NAC-Extreme-Control-Wants-to-terminate-ses...

But wanted to see if anyone has had a similar problem and what cause of action they did to correct it.

Many thanks,

Martin

2 replies

Userlevel 1
how is this an error? These are just the different RADIUS return attributes, and nothing seems like it is wrong.
Userlevel 6
Hi Martin,

i run into similiar problem to set session-timeout=xxxxx. (session-timeout = trigger a re-Auth).

Try a smaller session-timeout value.
Try the lastest EXOS Version of the EXOS trail (16.2 / 21.1.4 / 22.3)

(In daily project nearly every EXOS version has some smaller bugs/issues and i am waiting for some current fixes)

Regards,
Matthias

Reply