Redirect a session timeout in ASP.

Hello

I built a client area for my site which is accessible to clients only. The information displayed in a database are important (for example the passwords and phone numbers), I need the session timeout and redirect. I have successfully created this code which works like a treat:

< %
Session.Timeout = 3
% >

As timeout only page but used redirects them, just at the moment where they're trying to go to a page that is used by the connection, it will be will give them an access denied page.
I came up with this script so that it would redirect them, at the end of the session so that no one can view information about the current page:

< %
If Session.Timeout = 1 then
Response.Redirect ("pagetimeout.asp")
end if
% >

but this doesn't seem to work.
but who doesn't either. I'm really tired. I use NO ASP ASP.NET.

I would really appreciate help with this because it is very important for security reasons.

Thanks in advance, Adz

I saw on a Web page that it worked:

OK I solved this by simply putting a HEAD of refresh tag in my template so after 180 seconds (3 minutes) y page redirects to my auto logout page presentation. That's what I wanted to achieve so that when a user leaves and forgot to sign out, then the page will record the automatically, as long as the user is not refreshing the page, I'll be fine! :)

What I have to do now is to stop people from just close the browser and click the link "logout".

Thanks for your help, Adam

Tags: Dreamweaver

Similar Questions

  • [ADF, JDev12.1.3] How/where to set the session timeout

    Hallo,

    After a few minutes of inactivity, the browser displays a message to inform that the session is not more active and only OK been must be clicked to refresh the page.

    If a dialog box "btf" has been opened on the left, it becomes...

    I would like to know what is the right place/method to set a deadline.

    If possible I would like that when the timeout checks, the application performs a redirect to a page I like (for example the login page).

    The application of ADF Essentials and is deployed to the GlassFish application server.

    My concern is... what should happen to the open operation / pending when the time-out occurs?

    For example, the user is modifying an af:table but it has not clicked validate or cancel...

    Thank you

    Federico

    I would like to know what is the right place/method to set a deadline.

    For java web applications, you can set the session timeout in the web.xml file. (this is the global settings associated with all sessions)

    If you wish, you can set the timeout of session by program (and this is related only to the current http session).

    If possible I would like that when the timeout checks, the application performs a redirect to a page I like (for example the login page).

    http://fortunefusionminds.blogspot.com/2014/04/how-to-redirect-to-custom-page-whenever.html

    ADF: Session expires management redirect to login page | Bungbutan

    ADF developers World: Detection and handling of user session expiry

    My concern is... what should happen to the open operation / pending when the time-out occurs?

    Well, session is destroyed, it will destroy all instances of AM and do rollback.

    See also: Andrejus Baranovskis Blog: ADF BC Application Module Instance Timeout and reliance Timeout of Session Web

    Dario

  • Related workflow in the dialog box / popup window and Session Timeout

    Hi team.

    Using JDeveloper 11.1.2.4.

    We have several use cases that have linked the workflow shown in dialogues.  Dialogues are defined in the workflow.  The dialogues show very well related workflows.  However, if we have a session timeout, we are witnessing the login page that appears inside the window of dialogue instead of the home page.  Any suggestions out there?

    I have the text on a command button, invoking the action of dialogue BTF.

    useWindow = "true" windowModalityType = "applicationModal.

    Thank you

    BradW

    Hello.  Digging into the issue, we had a requirement to force the user to the logon page when the session expires.  However, the Service of Dialogue rich ADF fires and wants to ask us if we want to save the changes or continue leaving the popup.  To work around this problem, we made a JS call, follow these steps:

    AdfAgent.AGENT.removeBubbleEventListener(AdfPage.PAGE.getDomWindow(),"beforeunload", AdfDhtmlRichDialogService._beforeUnloadHandler);
    

    So, in summary, we had created a PagePhaseListener to inject some JS in every page to make a timer based client-side redirect.  However, the Service of RichDialogue ADF complain if there are changes in the pop-up window.  To work around this problem, the timer called the removeBubbleEventListener.

    It works, I think it might be a bit fragile between versions.

    BradW

  • Why need Session timeout with the public user for public portal?

    Hi all

    I use WebCenter Portal 11.1.1.8 and I found that with the user public space WebCenter show still expire page and redirect them to the login page. I did not understand why Oracle do? If Oracle cannot remove the public user session timeout, but they must not give this event for public user. The end user, they don't care in this respect, it just feel discomfortable.

    I really want a solution for this problem of Oracle. If the session is out of time, they only auto refresh page when the user doing anything on the new page (exp: moving the mouse, the key... event event) and the user will never know on this subject.

    You have an idea about this?

    Thank you!

    Hello.

    The patch allows just to use in file configuration web.xml depending the context-param:

    
         oracle.adf.view.rich.sessionHandling.WARNING_BEFORE_TIMEOUT
         0
    
    

    This feature is STANDARD in newer versions.

    He added the Web.XML WebCenter Portal (spaces).

    I recommend that you add by using the project of PortalExtension instead of change manyally web.xml because when you apply patches manually changes in the web.xml file are lost.

    Managing file web.xml in the WebCenter Portal (previously the WebCenter spaces) | VASSIT | UK

    Kind regards.

  • Error handling/Session Timeout with APEX &amp; Ajax / Javascript

    In our project, we have the problem, what a session timeout can occur when the user stays on the same page and a jQuery/JavaScript/ajax process is used.

    If a request for action called in a popup ajax without an active session process the HTML for the login page is the user.

    How a management capable errors that no html will be displayed in the pop-up window?


    Further there are external JavaScript files which need to read the content of elements of the application.
    Is there an elegant/small/reusable way to get the value of the elements of the application?
    The & APP_ID. The syntax does not work in external JS files.

    Hi Oliver

    Personally, I think that if you get a timeout that the popup is closed and your parent page is redirected to the login page. By using a cheque as a reminder of the success/error during an AJAX call you inspect the xhr.responseText to work if you have received a timeout would be recommendation and if found close the context menu, and then assign him the login page window.location.

    However for AJAX calls not you will face a problem. In this case, you need a script in your login page that checks the window.opener and if so close the popup and sets the window.location opener to your login page. for example, I would like to add something like this to your header login page or login page model header.

      
    

    Note: only tested on FF. In addition, the javascript above is just a very basic example and will close all popup which displays the login page and reload the parent with the login page. It can lead to an undesirable feature for web pages open your app in a popup, since it will be automatically shut down and recharge the calling page that could frustrate people. In this case, you will need to add more conditional logic in the script to check the current window.opener.location to check if the URL is for your application and then perform the close and reload action.

    Of course, there are other ways to manage what is happening it is just an option I would like to Explorer.

    If you need to read the values of the elements of application not page elements in javascript, you need to add a script to your page footer that defines these example

    
    

    To get the value of an element of the application:

    apex.appItem('MY_APP_ITEM1');
    

    In the script above the request item values are secure prevent changes since they are accessible through the service such that they are defined as local variables to the breast. The only issue you will face access the value of an element of application which is been updated in session state by a process of AJAX. With the help of local values printed on the page rendered as it can get out of sync. If your item applciation values include line breaks or double quotes then you must escape them, if you need this support use a region of page PLSQL and escape the output after JSON script item values.

    In the example I use apex Namespace, some people may argue it's a bad habit, but for me, I like to keep everything apex linked together. He has pro of / jerks to the argument, if the decision is yours.

    Note: the reason to add the script to your footer must ensure that the values of point of application have been in session state, before they are issued.

    The previous post of VC is the right way to access the elements of the entry page and DOM values.

    See you soon
    Matt

  • ICX:session Timeout

    Hello people:

    Some of our users have an error 'Internet Explorer cannot display the web page' - when they are in the APPS that is longer than the session timeout and try and go back to the page they were on (who should really lead to the logon page)

    My question is...

    If I change the system profile Option "ICX:Session Timeout" to a larger number (say 120 instead of the current default value of 30), should I run autoconfig so on the application layer?

    Also because it is a SINGLE sign-on enabled environment, is there any place (other than the Apache Logs) look, to find the cause of this error IE?

    To me, it seems that the URL to redirect does not work as expected.

    Thanks in advance for your help

    Check the Apache logs for possible errors.

    Please see these documents.

    Reconnect loops due to the Icx: time limit [ID 369950.1]
    Advice and queries for the resolution of the problems of Timeout of Session Forms [402674.1 ID]
    Can't get out of the e-Business Center when the session has expired. [603701.1 ID]

    Thank you
    Hussein

  • management of the adf security session timeout

    Dear all,

    I use adf authentication (authentication AD) as part of the security. When during the test, I put the session timeout to 1 min.
    When the user performs an activity on the page with 1 minute idle time, the browser displays the alert that the session has expired. After that, the page refreshes and gives the error on the page "resource cannot be found.

    So, how can I redirect the user to the page of the session after session timeout...?


    Kind regards
    Sicard.

    JDeveloper 11.1.1.4.0

    Check this box
    http://KR.forums.Oracle.com/forums/thread.jspa?threadID=2151982&TSTART=0

  • Catch the event Web Service Session Timeout

    Hi all

    I have a LV Web Service communicate to a web client (Chrome, IE, FF, etc.).  The user connects to the server and create a new session for him to help create Session VI.  One of the entrances to this function is a timeout value (default 60000ms).  The sessions behavior is such that if the user does not activate an application for web service (GET/POST/PUT/etc) within the time limit, then the session is automatically destroyed by the web service.  That's what I want, it's fantastic.

    My question is How can I detect when the session timeout happens? Another way to say, How can I detect when the user session is automatically destroyed?

    What I tried:

    • Of course, I can provide a "logout" link to the user calling ultimately "Destroy Session" VI, but I can't count on the user actually click this link (e.g. you really explicitly sign out of gmail or simply close your web browser?)
    • I thought that the only way to proceed would be to save the cookie of session ID returned by create Session VI and then query this ID to see if the session still exists (check if Session exists VI).  If the session does not exist, well, I know it has expired or the user manually destroyed it.  However, even if I save the cookie ID, I don't see where I can actually use it any where (especially not check if Session is VI). It just seems no value given to the range of sessions.

    Is this possible?

    Thank you

    Rory

    Sorry, Thomas, but that isn't going to work.  Think about it - you do not request a web service during the time-out period. You get ONLY a web service request when the client actually asked something.  The customer does not have during a timeout; It's just times out... so, there is no node on the block diagram to check because there is no block diagram... get it?

    No worries, however, I found the solution [read: workaround], even if the LV can do it (from 2013sp1).

    The best way to detect if a user session times out / out times would be for LV to this exhibit as an event in the web service. The following approach would be for LV accepts a cookie as an entry ID and then provides information on this session (i.e. the session exists).  I have a smell of two feature requests...

    But because BT cannot do these things (or not exposed to the developer), you will need to get creative on the client side.  Since I'm on Javascript/jQuery/AJAX on my front end, then it is possible for me to detect when the customer leaves the page or close the browser.  It comes to $(window) .unload () in jQuery.  Then, I can take this event and an asynchronous AJAX command of fire to one of my web service VI that will eventually call the "destroy Session" VI.

    For more information see the site here:

    http://lavag.org/topic/18490-catch-session-timeout-events-in-LV-Web-service/

    Hope this helps someone.

  • AnyConnect Session Timeout issue

    We have some remote users that are not happy with the SSL Connect connection down after close their laptops or lose their wireless for once. I read this question and answer of a Cisco page and I was wondering where the session time-out setting is changed. It's on the network client, software map AnyConnect or ASA firewall?

    Thank you, Pat.

    Q. What is the AnyConnect reconnect behavior?

    A. AnyConnect will attempt to reconnect if the connection is interrupted. This behavior is not configurable and auto. As long as the session on the SAA is still valid, the session will resume if AnyConnect can restore the physical connection.

    Version 2.2 includes a roaming feature that allows AnyConnect reconnect after a sleep of PC. The client will continue to try indefinitely until the head told him he can't reconnect and the client will not immediately RIP into the tunnel when the system goes Standby/Hibernate implementation. For customers who don't want this feature, set the session timeout value low to prevent sleep or resume reconnects.

    And also, for the new AnyConnect profile changes take effect, you will need to reconnect your AnyConnect session if the new policy is pushed to the client.

  • WLAN - session timeout

    I was told it is advisable to ISE to configure the session timeout something > s 7200 (2 hours).

    What happens if we do not enable session timeout at all? (WLAN/advanced, "Enable Session Timeout")

    What would be the implication/security operation, if any?

    It means customer would authenticate only once, and can stay on, without having to go through the authentication of 802. 1 x all day?

    Is there a default session timeout value?

    Here's a post on the time-out settings

    https://rscciew.WordPress.com/2014/05/07/timeout-setting-on-wireless-LAN-Controller/

    As far as I understand it, more big session timeout values can train your oblique stats Cordless drill. Otherwise there is no adverse impact to increase it.

    HTH

    Rasika

    Pls note all useful responses *.

  • AC VPN: vpn-session-timeout and prompt the user

    Hello

    Is it possible to invite the user to continue the session shortly before it hits the vpn-session-timeout value (ASA).

    Thank you

    Sean

    Sean,

    I believe that no job like this been done on it by the BU.

    We had this never open a:

    https://Tools.Cisco.com/bugsearch/bug/CSCsx17267/?reffering_site=dumpcr

    M.

  • The 'IETF-RADIUS-Idle-Timeout' value substitute "Vpn-session-timeout' of group policy?

    Hello community,

    I wish to have a dynamic substitution of "Vpn-session-timeout' of Group Policy (using"ldap attribute-map").

    Read the section "Support for RADIUS authorization attributes" of the SAA, it is not clear, but apparently attribute 'IETF-RADIUS-Session-Timeout' being Cisco attribute name of the ASA to "vpn-session-timeout '.

    Can anyone confirm?

    R, Alex

    Yes!

    http://www.Cisco.com/en/us/docs/net_mgmt/cisco_secure_access_control_ser...

  • Configure the timeout and session timeout in a group policy.

    I want a L2L tunnel to establish a period of time, this tunnel is established in a PIX 515E.

    Then I had seen that we must configure the idle time in group policy, but I have no ' t know the difference between the idle timeout setting and the session timeout.

    Anyone know what is the difference between this two command line.

    Thank you

    Hello

    Session-Timeout: at the end of this time, the security apparatus terminates the connection.

    Idle-timeout: If there is no communication on the connection activity in this period, the security apparatus terminates the connection.

    Please see the below URL for more details.

    http://www.Cisco.com/en/us/docs/security/ASA/asa70/command/reference/TZ.html#wp1281883

    http://www.Cisco.com/en/us/docs/security/ASA/asa70/configuration/guide/vpngrp.html

    Kind regards

    Arul

    * Rate pls if it helps *.

  • ISE 1.1 - switch ignores 'Session-Timeout '.

    Hi all

    I'm playing with the service to ISE customers and have some difficulties in function of time.

    After comments connects, the Radius attributes are sent to the switch (3750G) one of them is Session-Timeout, which should be similar to 1 h (DefaultOneHour)

    According to ISE logs and debugs switch, ISE has done well and this attribute has been sent but it seems that the switch simply ignores.

    May 24 07:03:11.658: %SEC-6-IPACCESSLOGP: list ACL-DEFAULT denied udp 10.1.100.194(1029) -> 10.1.100.2(389), 1 packet

    19:46:57: RADIUS: COA  received from id 36 10.1.100.6:64700, CoA Request, len 183

    19:46:57: RADIUS/DECODE: parse unknown cisco vsa "reauthenticate-type" - IGNORE

    19:46:57: RADIUS/ENCODE(00000000):Orig. component type = Invalid

    19:46:57: RADIUS(00000000): sending

    19:46:57: RADIUS(00000000): Send CoA Ack Response to 10.1.100.6:64700 id 36, len 38

    19:46:57: RADIUS:  authenticator 0B 30 6E 9B DF 97 0D A0 - D9 8B A5 5A 11 39 3E 41

    19:46:57: RADIUS:  Message-Authenticato[80]  18

    19:46:57: RADIUS:   11 42 82 E2 52 68 DF 28 CD 43 AE 88 0C 5D 91 10            [ BRh(C]]

    19:46:57: RADIUS/ENCODE(00000026):Orig. component type = Dot1X

    19:46:57: RADIUS(00000026): Config NAS IP: 0.0.0.0

    19:46:57: RADIUS(00000026): Config NAS IPv6: ::

    19:46:57: RADIUS/ENCODE(00000026): acct_session_id: 27

    19:46:57: RADIUS(00000026): sending

    19:46:57: RADIUS/ENCODE: Best Local IP-Address 10.1.100.1 for Radius-Server 10.1.100.6

    19:46:57: RADIUS(00000026): Send Access-Request to 10.1.100.6:1812 id 1645/25, len 267

    19:46:57: RADIUS:  authenticator 6D 92 DC 77 87 47 DA 8E - 7D 6B DD DD 18 BE DC 33

    19:46:57: RADIUS:  User-Name           [1]   14  "0016d329042f"

    19:46:57: RADIUS:  User-Password       [2]   18  *

    19:46:57: RADIUS:  Service-Type        [6]   6   Call Check                [10]

    19:46:57: RADIUS:  Vendor, Cisco       [26]  31

    19:46:57: RADIUS:   Cisco AVpair       [1]   25  "service-type=Call Check"

    19:46:57: RADIUS:  Framed-IP-Address   [8]   6   10.1.100.194

    19:46:57: RADIUS:  Framed-MTU          [12]  6   1500

    19:46:57: RADIUS:  Called-Station-Id   [30]  19  "00-24-F9-2D-83-87"

    19:46:57: RADIUS:  Calling-Station-Id  [31]  19  "00-16-D3-29-04-2F"

    19:46:57: RADIUS:  Message-Authenticato[80]  18

    19:46:57: RADIUS:   AD EB 99 4A F2 B9 4E BB 2E B3 E2 04 BE 5B 0C 72             [ JN.[r]

    19:46:57: RADIUS:  EAP-Key-Name        [102] 2   *

    19:46:57: RADIUS:  Vendor, Cisco       [26]  49

    19:46:57: RADIUS:   Cisco AVpair       [1]   43  "audit-session-id=0A01280100000016043E0D23"

    19:46:57: RADIUS:  NAS-Port-Type       [61]  6   Ethernet                  [15]

    19:46:57: RADIUS:  NAS-Port            [5]   6   50107

    19:46:57: RADIUS:  NAS-Port-Id         [87]  22  "GigabitEthernet1/0/7"

    19:46:57: RADIUS:  Called-Station-Id   [30]  19  "00-24-F9-2D-83-87"

    19:46:57: RADIUS:  NAS-IP-Address      [4]   6   10.1.100.1

    19:46:57: RADIUS(00000026): Sending a IPv4 Radius Packet

    19:46:57: RADIUS(00000026): Started 5 sec timeout

    19:46:57: RADIUS: Received from id 1645/25 10.1.100.6:1812, Access-Accept, len 272

    19:46:57: RADIUS:  authenticator F1 5F 57 72 FD 80 95 20 - 46 47 B5 CE DF 63 6E 1A

    19:46:57: RADIUS:  User-Name           [1]   19  "[email protected]/* */"

    19:46:57: RADIUS:  State               [24]  40

    19:46:57: RADIUS:   52 65 61 75 74 68 53 65 73 73 69 6F 6E 3A 30 41  [ReauthSession:0A]

    19:46:57: RADIUS:   30 31 32 38 30 31 30 30 30 30 30 30 31 36 30 34  [0128010000001604]

    19:46:57: RADIUS:   33 45 30 44 32 33            [ 3E0D23]

    19:46:57: RADIUS:  Class               [25]  49

    19:46:57: RADIUS:   43 41 43 53 3A 30 41 30 31 32 38 30 31 30 30 30  [CACS:0A012801000]

    19:46:57: RADIUS:   30 30 30 31 36 30 34 33 45 30 44 32 33 3A 69 73  [00016043E0D23:is]

    19:46:57: RADIUS:   65 2F 31 32 34 30 33 36 37 39 31 2F 32 39 37   [ e/124036791/297]

    19:46:57: RADIUS:  Session-Timeout     [27]  6   2940

    19:46:57: RADIUS:  Termination-Action  [29]  6   0

    19:46:57: RADIUS:  Message-Authenticato[80]  18

    19:46:57: RADIUS:   26 46 2C B6 75 95 AF 37 E6 3B B1 CB F2 70 E0 8D           [ &F,u7;p]

    19:46:57: RADIUS:  Vendor, Cisco       [26]  72

    19:46:57: RADIUS:   Cisco AVpair       [1]   66  "ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-Contractors-ACL-4fbcd736"

    19:46:57: RADIUS:  Vendor, Cisco       [26]  42

    19:46:57: RADIUS:   Cisco AVpair       [1]   36  "profile-name=Microsoft-Workstation"

    19:46:57: RADIUS(00000026): Received from id 1645/25

    19:46:57: RADIUS/DECODE: parse unknown cisco vsa "profile-name" - IGNORE

    May 24 07:03:19.132: %MAB-5-SUCCESS: Authentication successful for client (0016.d329.042f) on Interface Gi1/0/7 AuditSessionID 0A01280100000016043E0D23

    May 24 07:03:19.132: %AUTHMGR-7-RESULT: Authentication result 'success' from 'mab' for client (0016.d329.042f) on Interface Gi1/0/7 AuditSessionID 0A01280100000016043E0D23

    May 24 07:03:19.140: %EPM-6-POLICY_REQ: IP 10.1.100.194| MAC 0016.d329.042f| AuditSessionID 0A01280100000016043E0D23| AUTHTYPE DOT1X| EVENT APPLY

    May 24 07:03:19.165: %EPM-6-AAA: POLICY xACSACLx-IP-Contractors-ACL-4fbcd736| EVENT DOWNLOAD-REQUEST

    19:46:57: RADIUS/ENCODE(00000000):Orig. component type = Invalid

    19:46:57: RADIUS(00000000): Config NAS IP: 0.0.0.0

    19:46:57: RADIUS(00000000): sending

    19:46:57: RADIUS/ENCODE: Best Local IP-Address 10.1.100.1 for Radius-Server 10.1.100.6

    19:46:57: RADIUS(00000000): Send Access-Request to 10.1.100.6:1812 id 1645/26, len 144

    19:46:57: RADIUS:  authenticator 1A 52 18 C5 25 A7 5C DC - 29 C9 5C 7C C5 B3 FC 58

    19:46:57: RADIUS:  NAS-IP-Address      [4]   6   10.1.100.1

    19:46:57: RADIUS:  User-Name           [1]   38  "#ACSACL#-IP-Contractors-ACL-4fbcd736"

    19:46:57: RADIUS:  Vendor, Cisco       [26]  32

    19:46:57: RADIUS:   Cisco AVpair       [1]   26  "aaa:service=ip_admission"

    19:46:57: RADIUS:  Vendor, Cisco       [26]  30

    19:46:57: RADIUS:   Cisco AVpair       [1]   24  "aaa:event=acl-download"

    19:46:57: RADIUS:  Message-Authenticato[80]  18

    19:46:57: RADIUS:   2B 6B 13 37 0D 25 11 E9 6A 56 35 D8 91 9F EF F0           [ +k7?jV5]

    19:46:57: RADIUS(00000000): Sending a IPv4 Radius Packet

    19:46:57: RADIUS(00000000): Started 5 sec timeout

    May 24 07:03:19.191: %SEC-6-IPACCESSLOGP: list ACL-DEFAULT denied tcp 10.1.100.194(2125) -> 10.1.100.6(8443), 1 packet

    19:46:57: RADIUS: Received from id 1645/26 10.1.100.6:1812, Access-Accept, len 359

    19:46:57: RADIUS:  authenticator 31 B0 73 93 CA 0E 5C 7C - 11 29 AA 57 6C A1 53 D8

    19:46:57: RADIUS:  User-Name           [1]   38  "#ACSACL#-IP-Contractors-ACL-4fbcd736"

    19:46:57: RADIUS:  State               [24]  40

    19:46:57: RADIUS:   52 65 61 75 74 68 53 65 73 73 69 6F 6E 3A 30 61  [ReauthSession:0a]

    19:46:57: RADIUS:   30 31 36 34 30 36 30 30 30 30 30 30 35 44 34 46  [0164060000005D4F]

    19:46:57: RADIUS:   42 44 44 44 33 37            [ BDDD37]

    19:46:57: RADIUS:  Class               [25]  49

    19:46:57: RADIUS:   43 41 43 53 3A 30 61 30 31 36 34 30 36 30 30 30  [CACS:0a016406000]

    19:46:57: RADIUS:   30 30 30 35 44 34 46 42 44 44 44 33 37 3A 69 73  [0005D4FBDDD37:is]

    19:46:57: RADIUS:   65 2F 31 32 34 30 33 36 37 39 31 2F 32 39 38   [ e/124036791/298]

    19:46:57: RADIUS:  Termination-Action  [29]  6   1

    19:46:57: RADIUS:  Message-Authenticato[80]  18

    19:46:57: RADIUS:   80 EF 5B 80 76 F1 C9 37 0B 25 34 37 10 57 CC 44          [ [v7?47WD]

    19:46:57: RADIUS:  Vendor, Cisco       [26]  47

    19:46:57: RADIUS:   Cisco AVpair       [1]   41  "ip:inacl#1=permit udp any any eq domain"

    19:46:57: RADIUS:  Vendor, Cisco

    SW3750-1# [26]  48

    19:46:57: RADIUS:   Cisco AVpair       [1]   42  "ip:inacl#2=permit ip any host 10.1.100.6"

    19:46:57: RADIUS:  Vendor, Cisco       [26]  57

    19:46:57: RADIUS:   Cisco AVpair       [1]   51  "ip:inacl#3=deny ip any 10.0.0.0 0.255.255.255 log"

    19:46:57: RADIUS:  Vendor, Cisco       [26]  36

    19:46:57: RADIUS:   Cisco AVpair       [1]   30  "ip:inacl#4=permit ip any any"

    19:46:57: RADIUS(00000000): Received from id 1645/26

    May 24 07:03:19.216: %EPM-6-AAA: POLICY xACSACLx-IP-Contractors-AC

    SW3750-1#

    SW3750-1#

    SW3750-1#L-4fbcd736| EVENT DOWNLOAD-SUCCESS

    May 24 07:03:19.216: %EPM-6-POLICY_APP_SUCCESS: IP 10.1.100.194| MAC 0016.d329.042f| AuditSessionID 0A01280100000016043E0D23| AUTHTYPE DOT1X| POLICY_TYPE Named ACL| POLICY_NAME xACSACLx-IP-Contractors-ACL-4fbcd736| RESULT SUCCESS

    May 24 07:03:20.147: %AUTHMGR-5-SUCCESS: Authorization succeeded for client (0016.d329.042f) on Interface Gi1/0/7 AuditSessionID 0A01280100000016043E0D23

    19:46:58: RADIUS/ENCODE(00000026):Orig. component type = Dot1X

    19:46:58: RADIUS(00000026

    SW3750-1#

    SW3750-1#

    SW3750-1#

    SW3750-1#): Config NAS IP: 0.0.0.0

    19:46:58: RADIUS(00000026): Config NAS IPv6: ::

    19:46:58: RADIUS/ENCODE: Best Local IP-Address 10.1.100.1 for Radius-Server 10.1.100.6

    19:46:58: RADIUS(00000026): Sending a IPv4 Radius Packet

    19:46:58: RADIUS(00000026): Started 5 sec timeout

    19:46:58: RADIUS: Received from id 1646/35 10.1.100.6:1813, Accounting-response, len 38

    SW3750-1#
    SW3750-1#sh authe sess int g 1/0/7

    Interface:  GigabitEthernet1/0/7

    MAC Address:  0016.d329.042f

    IP Address:  10.1.100.194

    User-Name:  [email protected]/* */

    Status:  Authz Success

    Domain:  DATA

    Security Policy:  Should Secure

    Security Status:  Unsecure

    Oper host mode:  multi-auth

    Oper control dir:  both

    Authorized By:  Authentication Server

    Vlan Group:  N/A

    ACS ACL:  xACSACLx-IP-Contractors-ACL-4fbcd736

    Session timeout:  N/A

    Idle timeout:  N/A

    Common Session ID:  0A01280100000016043E0D23

    Acct Session ID:  0x0000001B

    Handle:  0x2F000017

    Runnable methods list:

    Method   State

    mab      Authc Success

    dot1x    Not run

    SW3750-1#

    Has anyone else encountered similar?

    I tried 12.2 (58) and now I'm stable

    Cisco IOS software, software C3750 (C3750-IPSERVICESK9-M), Version 15.0 (1) SE2, VERSION of the SOFTWARE (fc3)

    but in both cases, it is similar.

    concerning

    Przemek

    Hello

    Have you tried 12.2.55SE3 IOS which is recommended (tested) according to TrustSec 2.0 Design and getting started Guide implemented?

    What is your port configuration? Have you included orders "reauth?

    int gX/Y

    ...

    periodic authentication

    Server to authenticate again authentication timer

    See you soon,.

    Seba

  • The access admin VCS session timeouts

    Hello

    I have asked me if there are VCS performance problems if the admin access session has the value zero, or, for example 30 minutes.

    I know that this seems to be a stupid question because he absolutely should not affect the performance of VCS, however can someone please confirm this? In addition, the number of connected users admin will have a detrimental effect on the VCS? Once again, I guess not as the default is not limited, but confirmation would be greatly appreciated.

    Thank you very much

    Howard

    Hi Howard,.

    As far as I know, the number of sessions of admin and admin session logout, does not affect the performance of VCS much. However, please keep in mind that it certainly affects the performance of VCS if the number of sessions admin VCS is superior > 5 as VCS responded to all the commands and requests by admin VCS sessions.

    So, it is advisable to set the session timeout no matter what between 15-30 minutes, so VCS kicks on the sessions inactive admin and keep resources free VCS.

    Hope that answers your questions.  Feel free to rate this response accordingly.

    Thank you

    Saurabh

Maybe you are looking for