topic Re: 11213 No response received from Network Access Device after sendin in Network Access Control

11213 No response received from Network Access Device after sending a Dynamic Authorization request

hariharan.siva-SL — Mon, 17 Jun 2019 08:15:30 GMT

Hi there,

I see this error a lot in my ISE dashboard

11213 No response received from Network Access Device after sending a Dynamic Authorization request

At the same time I see the Posture Status as "Compliant"

What could be causing this? Have anyone encountered this before

Thanks,

Hari

Re: 11213 No response received from Network Access Device after sending a Dynamic Authorization request

hslai — Sat, 29 Jun 2019 21:27:58 GMT

It seems the CoA response packet from the NAD to ISE PSN lost or something like that, but the NAD went ahead and performed a re-auth to put the endpoint in compliant state.

I would suggest you to monitor the connectivity between ISE PSN and the NADs.

Re: 11213 No response received from Network Access Device after sendin

hnouel — Fri, 15 Oct 2021 20:17:31 GMT

I was having this problem and it turns out that the Shared Secret in the device configuration, Radius section, did not match the switch - aaa server radius dynamic-author - client x.x.x.x server-key. Once I made them the same, the endpoints started to authenticate.

Re: 11213 No response received from Network Access Device after sendin

Th0rv4l — Thu, 29 Dec 2022 22:06:41 GMT

Are you using DTLS? If so was the server-key just "radius/dtls" I am experiencing similar issues.

i.e.

radius server THE_IMPERFECT_SERVER
address ipv4 1.1.1.1

key radius/dtls

dtls ip vrf forwarding JUST_A_VRf

dtls ip radius source-interface vlan 4010

dtls trustpoint client SUB_CA (who issues cert manual enrollment)

dtls trustpoitn server SUB_CA (who issues cert manual enrollment)

aaa server dynamic-author

client 1.1.1.1 vrf JUST_A_VRf dtls client-tp SUB-CA server-tp SUB-CA

auth-type any

dtls ip radius source-interface VLAN 4010

Re: 11213 No response received from Network Access Device after sendin

ruhulamin210 — Tue, 12 Dec 2023 09:32:48 GMT

enable coa from ISE as per the screenshot