Session-Timeout NAC, with EXOS, MAC Auth & Agent-Less Assessment

  • 0
  • 2
  • Question
  • Updated 11 months ago
  • Answered
Hi,

In the throws of depolying a new network in a phased 1 approach of MAC auth and Informational Agent-Less assesement.

Currently clients are passing MAC auth and assessment but are throwing the following error:

Filter-Id='Enterasys:version=1:policy=Enterprise Access', Session-Timeout='604858', Termination-Action='1'




This is only for those that are doing assessment, so my assumption is that the effect of this is causing the problem.

I've seen this GTAC article that details how I can add a session timeout value:

https://gtacknowledge.extremenetworks.com/articles/How_To/NAC-Extreme-Control-Wants-to-terminate-ses...

But wanted to see if anyone has had a similar problem and what cause of action they did to correct it.

Many thanks,

Martin
Photo of Martin Flammia

Martin Flammia

  • 6,006 Points 5k badge 2x thumb

Posted 11 months ago

  • 0
  • 2
Photo of Matthew Hum

Matthew Hum

  • 404 Points 250 badge 2x thumb
how is this an error? These are just the different RADIUS return attributes, and nothing seems like it is wrong.
Photo of M.Nees

M.Nees, Embassador

  • 9,262 Points 5k badge 2x thumb
Hi Martin,

i run into similiar problem to set session-timeout=xxxxx. (session-timeout = trigger a re-Auth).

Try a smaller session-timeout value.
Try the lastest EXOS Version of the EXOS trail (16.2 / 21.1.4 / 22.3)

(In daily project nearly every EXOS version has some smaller bugs/issues and i am waiting for some current fixes)


Regards,
Matthias