Which RADIUS attribute is used to dynamically assign the Inactivity active timer for MAB users from the Cisco ISE node?
Click on the arrows to vote for the correct answer
A. B. C. D.D.
The correct answer is D. idle-timeout.
When a device connects to a network and uses the Media Access Control (MAC) address bypass (MAB) authentication method, it is dynamically assigned an Inactivity active timer. This timer is used to determine when the device is considered idle and should be disconnected from the network.
The RADIUS attribute used to dynamically assign the Inactivity active timer for MAB users from the Cisco ISE node is the "idle-timeout" attribute. This attribute is sent by the RADIUS server to the network access device (NAD) as part of the Access-Accept message. The value of this attribute is a time in seconds, after which the NAD should disconnect the device if it has been idle for that period of time.
The other answer options are not correct for the following reasons:
A. The "session-timeout" attribute is used to specify the maximum session duration for a user. It is not used to dynamically assign an Inactivity active timer for MAB users.
B. The "termination-action" attribute is used to specify the action that the NAD should take when a session is terminated, either by the user or by the network administrator. It is not used to dynamically assign an Inactivity active timer for MAB users.
C. The "radius-server timeout" attribute is used to specify the timeout period for RADIUS messages between the NAD and the RADIUS server. It is not used to dynamically assign an Inactivity active timer for MAB users.
In summary, the correct RADIUS attribute used to dynamically assign the Inactivity active timer for MAB users from the Cisco ISE node is the "idle-timeout" attribute.