topic Re: ISE AD Integration Fails in Network Access Control

ISE AD Integration Fails

Nit in Net — Wed, 23 Jun 2021 19:08:18 GMT

We have ISE 2.7 and tried to integrate with AD. Unfortunately following error occurred

Error Description: Request Timed Out

Support Details...
Error Name: LW_ERROR_RPC_LSA_TIMEOUT
Error Code: 60000

Detailed Log:

Checked the following :

Time on ISE and DNS are same

Firewall ports are open and verified

Confirmed the reachability between ISE and Domain controller.

Re: ISE AD Integration Fails

Mike.Cifelli — Wed, 23 Jun 2021 19:30:18 GMT

Have you attempted to verify AD side firewall as well? Capture traffic on AD side from ISE? Try taking a look at the following:

Identity Service Engine (ISE) and Active Directory (AD) Communications; Protocols, Filters and Flow. - Cisco

Re: ISE AD Integration Fails

Nit in Net — Wed, 23 Jun 2021 20:07:28 GMT

Thanks for the responds,

Sure we will check the tcp dump,

As per my initial tshoot,we allowed all port on firewall.

Re: ISE AD Integration Fails

Nit in Net — Thu, 24 Jun 2021 21:58:27 GMT

Issue has been resolved after the latest patch 4 installation 🙂

Re: ISE AD Integration Fails

harishbau084 — Wed, 13 Dec 2023 06:59:23 GMT

We have faced same issue on ISE 3.2 patch 3, and its fixed on patch 4

Re: ISE AD Integration Fails

jitendrac — Mon, 18 Dec 2023 09:22:27 GMT

We also faced the same issue while joining the PSN node to AD error was " LW_ERROR_RPC_LSA_TIMEOUT error code 60000" on ISE 3.2 patch 3, and after applying patch 4, the issue was resolved.

Re: ISE AD Integration Fails

mcwsupport35297 — Tue, 19 Dec 2023 08:34:05 GMT

a soft reboot will also fix the issue.