topic Re: ISE version 3 authentication error in Network Access Control

ISE version 3 authentication error

Eman.Bakri — Wed, 24 Aug 2022 11:16:12 GMT

Hi all

I have ISE version 3.0.0.458 integrated with Active Directory, firstly the authentication completed successfully, but there is an issue happens after a awhile, the authentication failed, and when I checked the log in ISE, I found the below Log:

Failure Reason	12953 Received EAP packet from the middle of conversation that contains a session on this PSN that does not exist
Resolution	Verify known NAD issues and published bugs. Verify NAD configuration. Turn debug log on DEBUG level to troubleshoot the problem.
Root cause	Session was not found on this PSN. Possible unexpected NAD behavior. Session belongs to this PSN according to hostname but may has already been reaped by timeout. This packet arrived too late.

the issue was solved when I reload the ISE, but I need to avoid this issue, can any one help me?

Thanks in Advance.

Re: ISE version 3 authentication error

Walker — Wed, 24 Aug 2022 11:30:10 GMT

This was a bug in earlier releases but I believe it has since been fixed. Can you go into more details on how your authentication is taking place? What type of device, 802.1x or MAB, wired or wireless? Also, is a load balancer being used in this situation?

Re: ISE version 3 authentication error

Eman.Bakri — Wed, 24 Aug 2022 13:31:34 GMT

Thanks for your reply.

the authentication using Active directory.

devices using Dot1x for wired users.

there is no load balancing. we have two nodes work as Active-Passive .

Regards.

Re: ISE version 3 authentication error

Walker — Wed, 24 Aug 2022 13:47:15 GMT

Are you able to post your AAA config as well as tell us what version of IOS you are running in your network?

Re: ISE version 3 authentication error

Eman.Bakri — Mon, 29 Aug 2022 15:53:36 GMT

Sorry for not sharing the information, but i am out of office these days.

But the issue is still happening, is there other recommended troublesoot steps to do?

Thanks.

Re: ISE version 3 authentication error

ahollifield — Mon, 29 Aug 2022 17:15:05 GMT

Do you have any of the 3.0 patches installed? What is your NAD?

https://community.cisco.com/t5/security-knowledge-base/how-to-ask-the-community-for-help/ta-p/3704356

Re: ISE version 3 authentication error

Eman.Bakri — Mon, 29 Aug 2022 18:47:19 GMT

There is no patches installed, I used cisco switches 9200l as NAD.

Regards.

Re: ISE version 3 authentication error

ahollifield — Mon, 29 Aug 2022 19:22:05 GMT

Step one needs to be to install the latest 3.0 patch before continuing.

Re: ISE version 3 authentication error

Eman.Bakri — Mon, 29 Aug 2022 20:02:59 GMT

I didnot find any patches in ISE patch management to install, could you please guide me about how to find the latest patch and install it please?

Re: ISE version 3 authentication error

Walker — Mon, 29 Aug 2022 20:19:42 GMT

You can find the Identity Service Software 3.0 and patches here:

https://software.cisco.com/download/home/283801620/type/283802505/release/3.0.0

Re: ISE version 3 authentication error

Eman.Bakri — Thu, 01 Sep 2022 09:50:58 GMT

@ahollifield , I installed the latest patch and it working fine till now, thank you for your support

Re: ISE version 3 authentication error

Eman.Bakri — Thu, 01 Sep 2022 09:51:27 GMT

@Walker I installed the latest patch and it working fine till now, thank you for your support