topic Failure Reason : 22017 DenyAccess Identity Source selected in Network Access Control https://community.cisco.com/t5/network-access-control/failure-reason-22017-denyaccess-identity-source-selected/m-p/1529232#M254349 <P>I just setup a new ACS1120 with ACS 5.1. I am able to authenticate via TACACS+/Active Directory from cisco switches but unable to <SPAN style="background-color: #f8fafd;">authenticate using RADIUS/Active Directory from a wireless client. I get the error "Failure Reason : 22017 DenyAccess Identity Source selected" when I check the ACS5.1 log. My setting is supposed to use AD1 for the Identity Store Sequence. I do not know where the DenyAccess Identity Source is coming from. </SPAN></P><P></P><P><SPAN style="background-color: #f8fafd;">Please help.</SPAN></P> Mon, 11 Mar 2019 00:33:18 GMT adaka1adaka 2019-03-11T00:33:18Z Failure Reason : 22017 DenyAccess Identity Source selected https://community.cisco.com/t5/network-access-control/failure-reason-22017-denyaccess-identity-source-selected/m-p/1529232#M254349 <P>I just setup a new ACS1120 with ACS 5.1. I am able to authenticate via TACACS+/Active Directory from cisco switches but unable to <SPAN style="background-color: #f8fafd;">authenticate using RADIUS/Active Directory from a wireless client. I get the error "Failure Reason : 22017 DenyAccess Identity Source selected" when I check the ACS5.1 log. My setting is supposed to use AD1 for the Identity Store Sequence. I do not know where the DenyAccess Identity Source is coming from. </SPAN></P><P></P><P><SPAN style="background-color: #f8fafd;">Please help.</SPAN></P> Mon, 11 Mar 2019 00:33:18 GMT https://community.cisco.com/t5/network-access-control/failure-reason-22017-denyaccess-identity-source-selected/m-p/1529232#M254349 adaka1adaka 2019-03-11T00:33:18Z Re: Failure Reason : 22017 DenyAccess Identity Source selected https://community.cisco.com/t5/network-access-control/failure-reason-22017-denyaccess-identity-source-selected/m-p/1529233#M254354 <HTML><HEAD></HEAD><BODY><P>This error ocurs because the identity policy you have defined has resulted in a result of deny access.</P><P></P><P>You should review the authentication details to see which access service matched and then which idenity policy rule.</P><P></P><P>You can see this information in theuthentication details in Monitoring and Troubleshooting infromation</P></BODY></HTML> Sun, 07 Nov 2010 06:39:57 GMT https://community.cisco.com/t5/network-access-control/failure-reason-22017-denyaccess-identity-source-selected/m-p/1529233#M254354 jrabinow 2010-11-07T06:39:57Z Re: Failure Reason : 22017 DenyAccess Identity Source selected https://community.cisco.com/t5/network-access-control/failure-reason-22017-denyaccess-identity-source-selected/m-p/1529234#M254365 <HTML><HEAD></HEAD><BODY><P>Thanks jrabinow. That works!</P></BODY></HTML> Mon, 08 Nov 2010 02:14:14 GMT https://community.cisco.com/t5/network-access-control/failure-reason-22017-denyaccess-identity-source-selected/m-p/1529234#M254365 adaka1adaka 2010-11-08T02:14:14Z