Guest

Preview Tool

Cisco Bug: CSCvs60603 - License count does not increment in MnT session-directory under RADIUS Proxy without Local AuthZ

Last Modified

Jan 13, 2020

Products (1)

  • Cisco Identity Services Engine

Known Affected Releases

2.6(0.903)

Description (partial)

Symptom:
Base License will not be consumed never if ISE is deployed as Radius Proxy WITHOUT 'Continue to Authorization Policy on Access-Accept' option.

The documentation describes as following statement.
https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/admin_guide/b_ise_admin_guide_26/b_ise_admin_guide_26_chapter_0110.html#concept_F7FC0B895D284727B8E3DDDBCAD1A23A
Cisco ISE license architecture consumption logic relies on authorization policy constructs.
Cisco ISE uses the dictionaries and attributes within authorization rules to determine the license to use.

Then, this behavior in sync between the actual behavior and Doc.
However., if this situation may not be expected, we should correct ISE behavior or Documentation.

Conditions:
- ISE is used as RADIUS Proxy.
- Disabled 'Continue to Authorization Policy on Access-Accept' under 'Administration > Network Resources > RADIUS Server Sequence > Advance Attribute Settings'
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.