topic Re: %AAA-3-SERVER_INTERNAL_ERROR: Switch 1 R0/0: sessmgrd: Server in Network Access Control

%AAA-3-SERVER_INTERNAL_ERROR: Switch 1 R0/0: sessmgrd: Server

pnowikow — Wed, 11 Mar 2020 15:08:19 GMT

Community members,

As of last night, I'm running ISE 2.3 patch 7 (we upgraded from patch 5) and in most of my switch logs I get this error. Has anyone seen this?

%AAA-3-SERVER_INTERNAL_ERROR: Switch 1 R0/0: sessmgrd: Server '(null)': No server stats to increment access accept count!

Re: %AAA-3-SERVER_INTERNAL_ERROR: Switch 1 R0/0: sessmgrd: Server

Mark Elsen — Wed, 11 Mar 2020 16:19:46 GMT

- Tough to be the first one, especially with ISE , don't recommend it actually - anyway check if the switch running software version is compatible with this ISE version :

https://www.cisco.com/c/en/us/support/security/identity-services-engine/products-device-support-tables-list.html

Re: %AAA-3-SERVER_INTERNAL_ERROR: Switch 1 R0/0: sessmgrd: Server

pnowikow — Wed, 11 Mar 2020 16:24:36 GMT

We verified compatibility already. I'm running 16.12.02.

Thanks,

Re: �A-3-SERVER_INTERNAL_ERROR: Switch 1 R0/0: sessmgrd: Server

Mark Elsen — Wed, 11 Mar 2020 17:15:36 GMT

Check the ISE logs for the particular auth request (too). Are there any
errors ?

M.

Re: %AAA-3-SERVER_INTERNAL_ERROR: Switch 1 R0/0: sessmgrd: Server

Cristian Matei — Wed, 11 Mar 2020 19:08:16 GMT

Hi,

It could be just a coincidence. Check this thread for the solution:

https://community.cisco.com/t5/switching/aaa-3-server-internal-error-on-9300-switches/m-p/4039588

Regards,

Cristian Matei.

Re: %AAA-3-SERVER_INTERNAL_ERROR: Switch 1 R0/0: sessmgrd: Server

Arne Bier — Thu, 12 Mar 2020 10:07:52 GMT

I ran into this recently. My customer was using radius server-private instead of radius server. Do you also use server-private? Try the regular radius server syntax.

Re: %AAA-3-SERVER_INTERNAL_ERROR: Switch 1 R0/0: sessmgrd: Server

pnowikow — Thu, 12 Mar 2020 14:33:17 GMT

We do use server-private and tried to get "radius server" to work but I
couldn't figure out the syntax. Could you provide an example?

Re: %AAA-3-SERVER_INTERNAL_ERROR: Switch 1 R0/0: sessmgrd: Server

Cristian Matei — Thu, 12 Mar 2020 15:33:56 GMT

Hi,

The configuration was posted on the link i provided: https://community.cisco.com/t5/switching/aaa-3-server-internal-error-on-9300-switches/m-p/4039588

radius server FIRST

address ipv4 x.x.x.x

key xxxxx

radius server SECOND

address ipv4 y.y.y.y

key yyyyy

!
aaa group server radius RADIUS_GROUP
server name FIRST
server name SECOND
ip radius source-interface Vlan5

Regards,

Cristian Matei

Re: %AAA-3-SERVER_INTERNAL_ERROR: Switch 1 R0/0: sessmgrd: Server

pnowikow — Mon, 04 Jan 2021 18:21:50 GMT

Christian,

It took me a little trial and error but I got your instructions to work.

Thanks a lot!

Pete