topic Re: Failure Reason | Received secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute in Network Access Control

Failure Reason | Received secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute

Ibrahim Jamil — Fri, 21 Feb 2020 18:40:22 GMT

Hello freinds

pls find attachment , what is the issue , how gonna fixed

thanks

Re: Failure Reason | Received secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute

Ibrahim Jamil — Mon, 27 Nov 2017 17:17:58 GMT

SE Event: 5405 RADIUS Request dropped, Failure Reason: 11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute

Switch is sending requests to ISE and the switch has no PAC installed.

Check switch and ISE configuration, check username and password credentials match between switch and ISE. Force a new PAC provisioning request by configuring:

radius server <server name>

pac key <password>

exit

Re: Failure Reason | Received secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute

Ibrahim Jamil — Mon, 27 Nov 2017 17:19:46 GMT

i have the below in place , but still get the error , i m using ISE 2.1

Check switch and ISE configuration, check username and password credentials match between switch and ISE. Force a new PAC provisioning request by configuring:

radius server <server name>

pac key <password>

exit

THANKS

Re: Failure Reason | Received secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute

Sdiana — Mon, 07 Jan 2019 03:50:41 GMT

Hi Ibrahim,
Can you please tell me how to check the username/password match between the switch and ISE. Where to check user/pass in ISE?
Appreciate your help.
Regards,
Sam

Re: Failure Reason | Received secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute

Aravind Ravichandran — Mon, 07 Jan 2019 07:00:36 GMT

Hi Sam,

You can configure the username/pass under Administrator->Network Resources->Network device->"Select the respective NAD" , then check the Advanced Trustec Settings as below.

Either you can configure custom device Id or you can use the network name as the device id & can configure the password.

This value should match in switches & in ISE

Re: Failure Reason | Received secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute

Sdiana — Mon, 07 Jan 2019 23:55:20 GMT

Thank you very much Aravind.