Cisco Bug: CSCvs60603 - License count does not increment in MnT session-directory under RADIUS Proxy without Local AuthZ
Jan 13, 2020
- Cisco Identity Services Engine
Known Affected Releases
Symptom: Base License will not be consumed never if ISE is deployed as Radius Proxy WITHOUT 'Continue to Authorization Policy on Access-Accept' option. The documentation describes as following statement. https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/admin_guide/b_ise_admin_guide_26/b_ise_admin_guide_26_chapter_0110.html#concept_F7FC0B895D284727B8E3DDDBCAD1A23A Cisco ISE license architecture consumption logic relies on authorization policy constructs. Cisco ISE uses the dictionaries and attributes within authorization rules to determine the license to use. Then, this behavior in sync between the actual behavior and Doc. However., if this situation may not be expected, we should correct ISE behavior or Documentation. Conditions: - ISE is used as RADIUS Proxy. - Disabled 'Continue to Authorization Policy on Access-Accept' under 'Administration > Network Resources > RADIUS Server Sequence > Advance Attribute Settings'
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.
Bug Details Include
- Full Description (including symptoms, conditions and workarounds)
- Known Fixed Releases
- Related Community Discussions
- Number of Related Support Cases