session timeout is same as re-authentication timer in IAPs.
when you configure re-auth timer the range is 0–32768 (in minutes)
so I believe the session-timeout attribute by the RADIUS server could be limited to 32768 (around 23 days)
------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.
------------------------------