300-715 · Question #203
Which RADIUS attribute is used to dynamically assign the inactivity active timer for MAB users from the Cisco ISE node?
The correct answer is C. idle-timeout. The RADIUS 'Idle-Timeout' attribute is used by Cisco ISE to dynamically assign the inactivity timer for MAB users, controlling when a session is terminated due to lack of activity.
Question
Which RADIUS attribute is used to dynamically assign the inactivity active timer for MAB users from the Cisco ISE node?
Options
- Aradius-server timeout
- Bsession-timeout
- Cidle-timeout
- Dtermination-action
How the community answered
(35 responses)- A6% (2)
- B3% (1)
- C89% (31)
- D3% (1)
Why each option
The RADIUS 'Idle-Timeout' attribute is used by Cisco ISE to dynamically assign the inactivity timer for MAB users, controlling when a session is terminated due to lack of activity.
radius-server timeout refers to the network access device's timer for how long to wait for a response from the RADIUS server, not an inactivity timer for users.
session-timeout defines the absolute maximum duration for a session, regardless of activity, after which the session is terminated.
The RADIUS Idle-Timeout attribute (attribute 28) is specifically designed to specify the maximum period of inactivity, in seconds, before a user's session is terminated or reauthenticated. This attribute is typically sent by the Cisco ISE node to the Network Access Device to enforce inactivity timers for MAB users.
termination-action specifies what action the network access device should take when a session expires due to session-timeout or idle-timeout, such as 'Terminate' or 'Reauthenticate'.
Concept tested: RADIUS Idle-Timeout attribute for session management
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_chapter_0100.html#concept_F7C48D082A2E46BA91D4C63D99E378D6
Topics
Community Discussion
No community discussion yet for this question.