https://community.cisco.com/t5/network-access-control/ise-error-log-eap-fast-pac-issue/m-p/3824503#M474542 <P>Can anyone explain the Failure Reason below that I am seeing in my radius live logs for an eap-fast session:</P><P>&nbsp;</P><P><SPAN>12962 Reject User Authorization PAC since its Initiator-ID does not match the Tunnel PAC Initiator-ID</SPAN></P><P>&nbsp;</P><P><SPAN>I have user auth PACs configured for 12 hours.&nbsp; This error occurred 4 hours after being deployed when an end user was at lunch so the PAC should have been good.&nbsp; I appreciate the assistance in advance.</SPAN></P> Fri, 22 Mar 2019 16:56:03 GMT Mike.Cifelli 2019-03-22T16:56:03Z https://community.cisco.com/t5/network-access-control/ise-error-log-eap-fast-pac-issue/m-p/3824503#M474542 <P>Can anyone explain the Failure Reason below that I am seeing in my radius live logs for an eap-fast session:</P><P>&nbsp;</P><P><SPAN>12962 Reject User Authorization PAC since its Initiator-ID does not match the Tunnel PAC Initiator-ID</SPAN></P><P>&nbsp;</P><P><SPAN>I have user auth PACs configured for 12 hours.&nbsp; This error occurred 4 hours after being deployed when an end user was at lunch so the PAC should have been good.&nbsp; I appreciate the assistance in advance.</SPAN></P> Fri, 22 Mar 2019 16:56:03 GMT https://community.cisco.com/t5/network-access-control/ise-error-log-eap-fast-pac-issue/m-p/3824503#M474542 Mike.Cifelli 2019-03-22T16:56:03Z https://community.cisco.com/t5/network-access-control/ise-error-log-eap-fast-pac-issue/m-p/3824924#M474543 <P>The message is added as part of the fix for&nbsp;CSCun45607.</P> <P>If not already done and it happening frequently, please open a TAC case to debug further.</P> Sat, 23 Mar 2019 20:42:59 GMT https://community.cisco.com/t5/network-access-control/ise-error-log-eap-fast-pac-issue/m-p/3824924#M474543 hslai 2019-03-23T20:42:59Z