multiple Failed authentication attempts

mosc9562 — Mon, 11 Mar 2019 05:54:48 GMT

Hello,

We have ISE 1.2 patch 14 running. We are getting a lot of failed authentications. I found a handful of PCs that are failing, and the failing authentication is not the issue. The problem is that they continuously try to re-authenticate, ever few minutes. I checked the authorization profile they are hitting and Reauthentication checkbox is not selected. The port this one PC is connected to had the command 'authentication timer reauthenticate server'. In testing I changed this to 'authentication timer reauthenticate 14400' (4 hours) but the PC still tries to authenticate every couple minutes. What am I doing wrong or what am I missing??

This is the entire port config:

interface GigabitEthernet1/6
switchport
switchport access vlan 200
switchport mode access
ip access-group ACL-ALLOW in
authentication event server dead action authorize
authentication event server alive action reinitialize
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate 14400
authentication violation restrict
mab
snmp trap mac-notification change added
snmp trap mac-notification change removed
dot1x pae authenticator
spanning-tree portfast edge
ip dhcp snooping limit rate 15
end

Thanks.

Hi, try authentication timer

hdussa — Mon, 27 Jul 2015 12:25:44 GMT

Hi,

try authentication timer restart 900 (= 15 minutes.).

If you are using MAB you should not use reauthentication.

topic multiple Failed authentication attempts in Network Access Control

multiple Failed authentication attempts

Hi, try authentication timer