Launching soon: The world's first vendor agnostic bug scrubLearn more & join waitlist
OPERATIONAL DEFECT DATABASE
...
...
If attribute Session-Timeout [27] is more than 65535 seconds, the switch will not populate the expected information in "Session timeout" section of the 'show' command "show access-session int gx/x det". It populates "N/A". Re-auth process itself is affected when "Session timeout" seconds specified in "Remaining" reached 0 seconds.
Attribute Session-Timeout [27] is more than 65535 seconds.
Change the # of seconds to 65535 or a lower #. OR shut/no shut the interface in order to get an updated value from RADIUS in attribute 27.
BROKEN switch#sho access-session int g1/0/3 det Interface: GigabitEthernet1/0/3 IIF-ID: 0x10DEDF3A MAC Address: xxxx.yyyy.zzzz IPv6 Address: Unknown IPv4 Address: 1.1.1.1 User-Name: xxxyyyzzz Status: Authorized Domain: DATA Oper host mode: multi-auth Oper control dir: both Session timeout: N/A <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< Acct update timeout: 172800s (local), Remaining: 172651s Common Session ID: 04402A0A000001855F1E85E8 Acct Session ID: 0x00000181 Handle: 0x8800017b Current Policy: PORT-AUTH-POLICY Server Policies: Filter-ID: NAC-all-qualnet Session-Timeout: 86400 sec Method status list: Method State dot1x Stopped mab Authc Success Radius debugs showing: Feb 19 13:37:05.929: RADIUS: Session-Timeout [27] 6 86400 <<<--- # of seconds pushed from Radius server WORKING switch#show access-session int Gi1/0/4 det Interface: GigabitEthernet1/0/4 IIF-ID: 0x1970E71D MAC Address: xxxx.yyyy.zzzz IPv6 Address: Unknown IPv4 Address: 1.1.1.1 User-Name: xxxyyyzzz Status: Authorized Domain: DATA Oper host mode: multi-auth Oper control dir: both Session timeout: 1800s (server), Remaining: 598s <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< Timeout action: Reauthenticate Common Session ID: 307F510A0000081559D43E06 Acct Session ID: 0x0000080f Handle: 0xfc00080b Current Policy: PORT-AUTH-POLICY Server Policies: Session-Timeout: 1800 sec Idle timeout: 900 sec Vlan Group: Vlan: 702 ACS ACL: xACSACLx-IP-QC_DACL-5e42e283 SGT Value: 8 Method status list: Method State dot1x Stopped mab Authc Success