Lab Minutes Forum
Technical Discussion => Security => Topic started by: nikeboy on July 31, 2015, 08:24:19 PM
-
Hi,
I have some issue with ISE and Cisco WLC:
My equipment:
- 1 SSID with 802.1x and radius points to ISE
- ISE 1.4 using AD as identity source.
Symptom:
- When clients connect to this SSID, they use their AD account to connect. But sometimes, even they type TRUE account, they can't connect and ISE show that:
Event 5440 Endpoint abandoned EAP session and started new
Failure Reason 5440 Endpoint abandoned EAP session and started new
Resolution Verify known NAD or supplicant issues and published bugs. Verify NAD and supplicant configuration.
Root cause Endpoint started new authentication while previous is still in progress. Most probable that supplicant on that endpoint stopped conducting the previous authentication and started the new one. Closing the previous authentication.
I don't know what the problem here. Could you help me please ?
Thanks
-
Does your system work for a while and then started showing this symptom? How often does it happen and what percentage of user affected? Will client eventually succeed or once fail it will always fail? If you restart ISE service or reboot ISE, does the problem goes away?
-
Hi MC,
Thanks for your reply.
- System still working
- About 10-20% user affected
- Let's see: clients first time get succeed, then they went home, then came back and fail. When get fail (ISE shows Reason 5440) , the device automatic disassociated and reconnect, and get succeed again.
-I've tried both restart service and reboot, but the issue still here.
Do you have any idea?
Thanks
-
I think one of my clients had run into similar issue but on ISE 1.3. Sporadic fail authentication for number of users but in their case the symptom goes away after a reboot and comes back after a few weeks. They had a TAC case opened but not sure what the outcome was. I lean towards a bug. Anyhow, what's the client OS (win7/win8)? Have you tried Windows update + latest fixes?
-
Hi MC,
This happen on any OS, any device (Windows7/8, Iphone, Android...)
This drive me crazy :)
Thanks