Authentication failed 11014 Radius packet contain invalid attribute

Ahmed Zniti — Mon, 11 Mar 2019 02:59:58 GMT

Hello

I have a failed authentication between SW 2960 and ISE 1.1.1 so when i put show authentication session on Switch all port are successfully authenticated (mab and 802.1x) but on ISE Monitor its display that The Authentication failed

Regards

Re: Authentication failed 11014 Radius packet contain invalid attribute

Jangchup — Sat, 25 Apr 2020 01:53:18 GMT

I am replying to a very old post with the hope that this might be helpful to someone like me who had this same exact issue.

So I had this similar issue with one my users who is connecting from Cisco AnyConnect client on Windows 10 computer.

[Windows 10 with AnyConnect] -> [ASA] -> [ISE] -> [AD]

After capturing the RADIUS packets by running debug on the ASA Firewall the issues was related to the username! The user was entering incorrect username!

The debug commands that I ran was:

debug radius session

debug radius decode

debug radius dynamic-authorization

topic Re: Authentication failed 11014 Radius packet contain invalid attribute in Network Access Control

Authentication failed 11014 Radius packet contain invalid attribute

Re: Authentication failed 11014 Radius packet contain invalid attribute