topic RADIUS Authentication Request dropped in Network Access Control

RADIUS Authentication Request dropped

augustoreyes — Mon, 17 Jun 2019 16:37:14 GMT

I'm getting a lot of alerts like this ones

Alert 1:

The authentication/accounting request from a NAD is silently discarded. This maybe because the NAD is unknown to ISE, mismatched Shared Secrets, or invalid packet content per RFC.

Alert 2:

RADIUS Request Dropped

The authentication/accounting request from a NAD is silently discarded. This maybe because the NAD is unknown to ISE, mismatched Shared Secrets, or invalid packet content per RFC

Re: RADIUS Authentication Request dropped

Mike.Cifelli — Mon, 17 Jun 2019 18:38:15 GMT

Are you having NAD issues when attempting to login via radius or tacacs+? Are the alarms generated from one NAD or multiple? Or is everything running smoothly, but you are still getting these alarms? The information you provided is vague.

Re: RADIUS Authentication Request dropped

augustoreyes — Mon, 17 Jun 2019 19:27:28 GMT

only from one NAD. just updated to 2.4.0.357 8 to see if problem would be corrected. This is running on a VM. I getting a lot of notifications via email about this issue from ISE. Also about running out of space on the RADIUS. All the sudden too.

new auth. fails for users on cell phones both IOS and Android where the cert. is not seen by them.

Re: RADIUS Authentication Request dropped

craig.beck — Mon, 17 Jun 2019 22:20:16 GMT

Reset the shared-secret at the NAD and ISE and see if it persists.