topic No authentication request from switch to ISE in Network Access Control

No authentication request from switch to ISE

welmjendel — Fri, 21 Feb 2020 18:32:56 GMT

hi Guys,

I faced a problem with our ISE ; when i changed the ip address of our ISE, there is no authentication request from switch and there is no log to troubleshoot.

FYI: i changed the ip address on the switch.

Regards,

Re: No authentication request from switch to ISE

Rob Ingram — Thu, 24 Aug 2017 14:54:36 GMT

Hi,

Is there basic network connectivity between the switch and ISE server? Can you ping the ISE servers's new ip address from the switch?

Run show aaa server on the switch and see if the radius server is alive or dead

Re: No authentication request from switch to ISE

welmjendel — Thu, 24 Aug 2017 14:59:36 GMT

thank you for your response!

yes i can ping the ise from Switch ; there is no issue of connectivity.

Re: No authentication request from switch to ISE

Rob Ingram — Thu, 24 Aug 2017 15:19:47 GMT

What is the output of the show aaa server command? Is the radius server marked alive or dead? Is this issue just on one switch or all switches?

Can you run a test authentication using the command test aaa group radius server.... you'll have to fill in the ip address of your ise server and username etc in order to run the command. What is then displayed in the ISE logs?

Re: No authentication request from switch to ISE

Mohammed al Baqari — Sat, 26 Aug 2017 10:48:13 GMT

Additionally, when you ping are you using source interface as your radius source.

Also, if you debug radius authen are you seeing request without response.?

Re: No authentication request from switch to ISE

kussriva — Mon, 28 Aug 2017 10:40:38 GMT

Hi welmjendel,

When you enter the new IP in the switch config, re-enter the shared key as well. Now run the test aaa group radius command and see if the server comes back up.

Thanks & Regards,

Kushagra Srivastava
Cisco PDI
http://www.cisco.com/go/pdi