topic RE: Session-Timeout NAC, with EXOS, MAC Auth & Agent-Less Assessment in ExtremeWireless (General)

Session-Timeout NAC, with EXOS, MAC Auth & Agent-Less Assessment

Anonymous — Mon, 25 Sep 2017 13:27:00 GMT

Hi,

In the throws of depolying a new network in a phased 1 approach of MAC auth and Informational Agent-Less assesement.

Currently clients are passing MAC auth and assessment but are throwing the following error:

Filter-Id='Enterasys:version=1:policy=Enterprise Access', Session-Timeout='604858', Termination-Action='1'

This is only for those that are doing assessment, so my assumption is that the effect of this is causing the problem.

I've seen this GTAC article that details how I can add a session timeout value:

https://extremeportal.force.com/ExtrArticleDetail?an=000079217

But wanted to see if anyone has had a similar problem and what cause of action they did to correct it.

Many thanks,

Martin

RE: Session-Timeout NAC, with EXOS, MAC Auth & Agent-Less Assessment

Matthew_Hum — Thu, 28 Sep 2017 05:21:00 GMT

how is this an error? These are just the different RADIUS return attributes, and nothing seems like it is wrong.

RE: Session-Timeout NAC, with EXOS, MAC Auth & Agent-Less Assessment

M_Nees — Thu, 28 Sep 2017 10:34:00 GMT

Hi Martin,

i run into similiar problem to set session-timeout=xxxxx. (session-timeout = trigger a re-Auth).

Try a smaller session-timeout value.
Try the lastest EXOS Version of the EXOS trail (16.2 / 21.1.4 / 22.3)

(In daily project nearly every EXOS version has some smaller bugs/issues and i am waiting for some current fixes)

Regards,
Matthias