topic Re: Cisco ISE as Tacacs only server - alarm: ISE Authentication Inactivity in Network Access Control

Cisco ISE as Tacacs only server - alarm: ISE Authentication Inactivity

ivan.mastrenko — Mon, 11 Mar 2019 08:50:39 GMT

Hello!

I have ISE 2.3, Patch 5 deployment, for Device Admin (Tacacs+) purposes only.

And I have an alarm that raising every 15 minuts:

Alarms: ISE Authentication Inactivity
Description: The ISE Policy Service nodes are not receiving Authentication requests from the Network Devices
Suggested Actions: Check the ISE/NAD configuration, check the network connectivity of the ISE/NAD infrastructure.

But I have an authentication actions on devices at periods when alarm is triggering, I see it at TACACS live logs, and reports.

Does this alarm consider TACACS authentication on devices?

Re: Cisco ISE as Tacacs only server - alarm: ISE Authentication Inactivity

Mohammed al Baqari — Mon, 15 Oct 2018 08:59:00 GMT

I think you are hitting the following bug.

CSCuz52877

Re: Cisco ISE as Tacacs only server - alarm: ISE Authentication Inactivity

Damien Miller — Mon, 15 Oct 2018 23:51:58 GMT

This alarm is for RADIUS authentications only. If you have a dedicated TACACS deployment that sees very seldom radius packets or none at all then this is expected.

Currently your only option is to live with the alarm or disable it from the alarm settings page. I suggest disabling it, hopefully in the future this alarm will be split in to radius/tacacs.