2nd try -ISE Endpoint abandoned EAP session

nadeekha — Thu, 28 Jul 2016 17:11:26 GMT

Hi Experts,

My customer is in the test/pilot phase with ISE 2.0. The Windows 7 endpoints are authenticating as expected. There are several messages in the log with the below error numbers

5440 Endpoint abandoned EAP session and started new

5436 RADIUS PACKET ALREADY IN THE PROCESS

Would appreciate it if some can give me an idea why these messages are showing up in the logs when all appears to be fine with the users successfully authentication as per the policy.

Thanks in advance

Nadeem

Re: 2nd try -ISE Endpoint abandoned EAP session

gbekmezi-DD — Thu, 28 Jul 2016 17:18:06 GMT

Hi Nadeem. These really are common/generic messages. An endpoint may have made multiple attempts before actually connecting. Is this a wired or wireless use case? One thing to look at is authentication latency and dot1x/EAP timeouts on endpoints.

topic 2nd try -ISE Endpoint abandoned EAP session in Network Access Control

2nd try -ISE Endpoint abandoned EAP session

Re: 2nd try -ISE Endpoint abandoned EAP session