collapse

Search


User Info

 
 
Welcome, Guest. Please login or register.
Did you miss your activation email?

Author Topic: Cisco ISE Failure Reason 5440  (Read 38572 times)

Offline nikeboy

  • Cisco Newbie
  • *
  • Posts: 3
  • Reputation: 0
  • Certification: CCNP
Cisco ISE Failure Reason 5440
« on: July 31, 2015, 08:24:19 PM »
Hi,

I have some issue with ISE and Cisco WLC:

My equipment:
- 1 SSID with 802.1x and radius points to ISE
- ISE 1.4 using AD as identity source.

Symptom:
- When clients connect to this SSID, they use their AD account to connect. But sometimes, even they type TRUE account, they can't connect and ISE show that:

Event    5440 Endpoint abandoned EAP session and started new

Failure Reason    5440 Endpoint abandoned EAP session and started new

Resolution    Verify known NAD or supplicant issues and published bugs. Verify NAD and supplicant configuration.

Root cause    Endpoint started new authentication while previous is still in progress. Most probable that supplicant on that endpoint stopped conducting the previous authentication and started the new one. Closing the previous authentication.

I don't know what the problem here. Could you help me please ?

Thanks

Offline MC

  • Global Moderator
  • Cisco Guru
  • *****
  • Posts: 399
  • Reputation: 606
  • CCIE x3 (RS,Sec,SP)
  • Certification: CCIE
Re: Cisco ISE Failure Reason 5440
« Reply #1 on: August 01, 2015, 11:16:44 PM »
Does your system work for a while and then started showing this symptom? How often does it happen and what percentage of user affected? Will client eventually succeed or once fail it will always fail? If you restart ISE service or reboot ISE, does the problem goes away?

Offline nikeboy

  • Cisco Newbie
  • *
  • Posts: 3
  • Reputation: 0
  • Certification: CCNP
Re: Cisco ISE Failure Reason 5440
« Reply #2 on: August 02, 2015, 12:29:07 AM »
Hi MC,

Thanks for your reply.

- System still working
- About 10-20% user affected
- Let's see: clients first time get succeed, then they went home, then came back and fail. When get fail (ISE shows Reason 5440) , the device automatic disassociated and reconnect, and get succeed again.
-I've tried both restart service and reboot, but the issue still here.

Do you have any idea?

Thanks

Offline MC

  • Global Moderator
  • Cisco Guru
  • *****
  • Posts: 399
  • Reputation: 606
  • CCIE x3 (RS,Sec,SP)
  • Certification: CCIE
Re: Cisco ISE Failure Reason 5440
« Reply #3 on: August 03, 2015, 10:26:46 PM »
I think one of my clients had run into similar issue but on ISE 1.3. Sporadic fail authentication for number of users but in their case the symptom goes away after a reboot and comes back after a few weeks. They had a TAC case opened but not sure what the outcome was. I lean towards a bug. Anyhow, what's the client OS (win7/win8)? Have you tried Windows update + latest fixes?

Offline nikeboy

  • Cisco Newbie
  • *
  • Posts: 3
  • Reputation: 0
  • Certification: CCNP
Re: Cisco ISE Failure Reason 5440
« Reply #4 on: August 04, 2015, 01:11:59 AM »
Hi MC,

This happen on any OS, any device (Windows7/8, Iphone, Android...)

This drive me crazy :)

Thanks

 

Related Topics

  Subject / Started by Replies Last post
10 Replies
23877 Views
Last post November 13, 2013, 11:04:57 PM
by adecisco
1 Replies
9143 Views
Last post October 03, 2013, 11:43:58 PM
by MC
2 Replies
11558 Views
Last post February 09, 2015, 10:54:52 AM
by ozone007
3 Replies
6558 Views
Last post December 16, 2014, 10:26:19 PM
by MC
6 Replies
15920 Views
Last post July 20, 2015, 07:48:48 AM
by amsa

SimplePortal 2.3.7 © 2008-2024, SimplePortal