topic Authentication failed "5440 Endpoint abandoned EAP session and started new" error in Network Access Control

Authentication failed "5440 Endpoint abandoned EAP session and started new" error

welmjendel — Fri, 21 Feb 2020 18:35:17 GMT

Hello Guys,

i faced this error "5440 Endpoint abandoned EAP session and started new"when users try to authoticate to network ( wired 802.1X) with ISE 2.3 .

FYI: before rebooting client machine users can authenticate normaly to the network.

In event manager on windows 10 i have this error: "Unable to identify a user for 802.1X authentication"

any idea please ???

Regards,

Re: Authentication failed "5440 Endpoint abandoned EAP session and started new" error

Mohammed al Baqari — Sat, 30 Sep 2017 17:14:50 GMT

Hi,

When the users stop responding to EAP reauthentication or start authentication while the NAD already have existing session, this message gets generated. Exmaple, when the endpoint hibernate and comes back online.

On the switch try the command 'authentication mac-move permit'. This will enable the NAD to terminate the existing 802.1x session and starts new one when a request is received while there is an existing session for the endpoint.

Also, there are couple of bugs related to windows 7 which can generate this message on ISE. Worth checking if they are applicable to windows 10. Here you go.

https://supportforums.cisco.com/t5/security-blogs/getting-past-intermittent-unexplained-802-1x-problems-on-windows/ba-p/3104109

Please remeber to rate useful posts.

Re: Authentication failed "5440 Endpoint abandoned EAP session and started new" error

welmjendel — Sun, 01 Oct 2017 12:08:32 GMT

thank you for your response !

i will see tomorrow this command can resolve the problem or not.

Re: Authentication failed "5440 Endpoint abandoned EAP session and started new" error

Mohammed al Baqari — Sun, 01 Oct 2017 12:12:16 GMT

To set the expectations, the log will still pop but machine should
authenticate with this command

Re: Authentication failed "5440 Endpoint abandoned EAP session and started new" error

welmjendel — Mon, 02 Oct 2017 10:08:09 GMT

hi,

the problem persist with this command.

Regards,

Re: Authentication failed "5440 Endpoint abandoned EAP session and started new" error

welmjendel — Mon, 02 Oct 2017 10:58:17 GMT

hello,

it works fine with NAM cisco Annyconnect.

Regards,

Re: Authentication failed "5440 Endpoint abandoned EAP session and started new" error

Mohammed al Baqari — Mon, 02 Oct 2017 15:13:16 GMT

Can you create the issue or is it random? Did you try to install the
hotfixes which I mentioned.

Re: Authentication failed "5440 Endpoint abandoned EAP session and started new" error

Dikkia — Fri, 06 Oct 2017 09:20:05 GMT

go to:
policy > resoult > AUTHENTICATION > allowed protocol > default Network access and DISABLE "EAP-TLS L-bit" under "allow eap-ttls"

Let me know if this will fix your problem

Re: Authentication failed "5440 Endpoint abandoned EAP session and started new" error

rps.soares — Thu, 28 Jun 2018 20:26:14 GMT

And news in this issue? Did it solve the problem of disconnections?

Re: Authentication failed "5440 Endpoint abandoned EAP session and started new" error

Dikkia — Tue, 03 Jul 2018 07:15:41 GMT

as said in the previus post, disabiling "eap-tls l-bit" fixed the problem for me.
rgds

Re: Authentication failed "5440 Endpoint abandoned EAP session and started new" error

raamin — Thu, 15 Nov 2018 22:16:31 GMT

Hi Can you please tell me which place are you telling this settings on PC or on ISE side?

Thanks

Re: Authentication failed "5440 Endpoint abandoned EAP session and started new" error

walwar — Thu, 15 Nov 2018 22:51:10 GMT

@raam, the "authentication mac-move permit" is on the switch side, and disabling the "EAP-TLS L-bit" is on the ISE side. What is the problem you're having?

Re: Authentication failed "5440 Endpoint abandoned EAP session and started new" error

slizarraga — Thu, 15 Aug 2019 23:01:43 GMT

It also worked for me

Re: Authentication failed "5440 Endpoint abandoned EAP session and started new" error

azzawim — Tue, 10 Mar 2020 12:32:53 GMT

Hey ,

I have the same issue as mentioned before but its between ISE and Xerox printer and between them there is a meraki SW .so on meraki SW the printer cannot get an dynamic IP address with the same error 5440 .

please let me know what can i do

Re: Authentication failed "5440 Endpoint abandoned EAP session and started new" error

rohunpandraka06468 — Thu, 11 Jun 2020 21:40:19 GMT

Hi, I have the EAP-TLS-L-bit disabled under Allow EAP-TTLS. But It's still showing the same error. Endpoint keeps abandoning the EAP session. Could you please help?

Re: Authentication failed "5440 Endpoint abandoned EAP session and started new" error

Vitus — Wed, 03 Feb 2021 09:02:13 GMT

I ✔ "EAP-TLS L-bit" on the ISE side, it worked. I dont know why. I just update the agent resources from cisco site. And then appeared this same case.

Re: Authentication failed "5440 Endpoint abandoned EAP session and started new" error

laurathaqi — Wed, 12 May 2021 10:51:37 GMT

Hi @rohunpandraka06468

Did you solve this issue?

Thank you,

Laura

Re: Authentication failed "5440 Endpoint abandoned EAP session and started new" error

Pablo Montiel Bernal — Wed, 28 Jul 2021 16:05:58 GMT

Hi Mohammed!

What about WLAN devices?