topic Re: 9800 series some wlc showing cisco ise is in dead state in Network Access Control

Some WLC Showing Cisco ISE is in DEAD State

poornakumar — Tue, 10 Sep 2024 04:35:05 GMT

Hi Team,

In our deployment some wlc is showing cisco ise is in dead state but still traffic get forward.so what could be the possibl reason for that wlc's to mark ise as dead and in the same deployment other wlc are working fine and for dot1x we have configure with VIP that is working fine but for guest portal authentication we are facing this issue for guest real radius server ip is configured in wlc.

Re: Some WLC Showing Cisco ISE is in DEAD State

Leo Laohoo — Tue, 10 Sep 2024 04:41:04 GMT

Is the WLC a 9800?

Re: Some WLC Showing Cisco ISE is in DEAD State

poornakumar — Tue, 10 Sep 2024 04:43:33 GMT

yup correct..

9800 series some wlc showing cisco ise is in dead state

poornakumar — Tue, 10 Sep 2024 04:52:53 GMT

Hi Team,

Re: 9800 series some wlc showing cisco ise is in dead state

Ambuj M — Tue, 10 Sep 2024 05:10:33 GMT

not sure if I follow your question completely, but if you are having issue with Guest issues through ISE then follow this step by step guide and let me know at what stage are you failing

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/220852-troubleshoot-central-web-authentication.html#toc-hId-1441757191

Re: Some WLC Showing Cisco ISE is in DEAD State

Leo Laohoo — Tue, 10 Sep 2024 07:36:28 GMT

Is the controller on 17.9.x?

Re: Some WLC Showing Cisco ISE is in DEAD State

Arne Bier — Tue, 10 Sep 2024 07:55:09 GMT

IIRC there are two parts of the "show aaa servers" command that show DEAD. One is the overall IP address, and the other is the SMD (Session Manager Daemon) - I never understood how it works. If you find out how to interpret the "show aaa servers" command let us know. I have seen cases where I had to "jump start" the Catalyst aaa radius processing (when it was DEAD) by sending test aaa group commands.

Re: 9800 series some wlc showing cisco ise is in dead state

MHM Cisco World — Tue, 10 Sep 2024 08:08:03 GMT

friend it simple
WLC mark ISE dead when
1- it not response to test packet
2-it slow response to authc packet <<- this case you face with wlc
in ISE authc detail see if there is any latency
if there is share the authc detail

MHM

Re: 9800 series some wlc showing cisco ise is in dead state

poornakumar — Thu, 12 Sep 2024 14:52:39 GMT

Thanks for the reply.

We have find that the traffic is going to old LB in our deployment but the traffic need to pass through new LB.After removing the old LB and configure the new LB it is working fine.

regards,

poornakumar