topic Cisco ISE 2.4 Patch5 Dynamic Authorization failed in Network Access Control

Cisco ISE 2.4 Patch5 Dynamic Authorization failed

tnt_network — Mon, 04 Feb 2019 12:52:09 GMT

Hi!

I have some problem with dynamic authorization.

The problem involved is similar to CSCvi28819.

But there are some differences.

First of all, I have no PxGrid.

I have Node Group of two Policy Service Servers.

Passive ID with Active Directory connection.

When the COA issued by primary node - Calling-Station-Id is correct MAC-address. All is OK!

When the COA issued by secondary node - Calling-Station-Id is an IP-Address and "Dynamic Authorization failed" error occured. Error-Cause: "Session Context Not Found"

Is there solution of this problem?

wbr Mikhail.

Re: Cisco ISE 2.4 Patch5 Dynamic Authorization failed

howon — Wed, 06 Feb 2019 05:08:59 GMT

Is passiveID enabled on box nodes? It sounds like session retrieved from MnT session table isn't functioning correctly. I suggest raising a TAC SR for this for RCA.

Re: Cisco ISE 2.4 Patch5 Dynamic Authorization failed

tnt_network — Wed, 06 Feb 2019 07:00:30 GMT

Yes, passiveID enabled on both nodes.
Thank a lot. I raised TAC SR yesterday.

Re: Cisco ISE 2.4 Patch5 Dynamic Authorization failed

ahmedatefelabd — Thu, 24 Nov 2022 08:17:48 GMT

Can you please share with us what was the issue?