topic Re: 5400 Authentication failed in Network Access Control

5400 Authentication failed

Ruelb2214 — Tue, 03 Dec 2024 04:58:14 GMT

Hi ALL,

We suddenly encounter issue on Wired connection with ISE, but on wireless no issue at all.

Every time laptop authenticates on wired, we got these logs from ISE:

Failure Reason :12953 Received EAP packet from the middle of conversation that contains a session on this PSN that does not exist
Resolution :Verify known NAD issues and published bugs. Verify NAD configuration. Turn debug log on DEBUG level to troubleshoot the problem.
Root cause: Session was not found on this PSN. Possible unexpected NAD behavior. Session belongs to this PSN according to hostname but may has already been reaped by timeout. This packet arrived too late.

There was no firmware upgrade prior to the issue, could this be error on the PSN service of ISE? is reboot can fix this?

Any advise please.

ISE version : 2.7 patch 4

Switch: WS-C3850-48P 16.12.08

Re: 5400 Authentication failed

MHM Cisco World — Tue, 03 Dec 2024 06:05:46 GMT

You have two PSN?

MHM

Re: 5400 Authentication failed

Ruelb2214 — Tue, 03 Dec 2024 09:09:06 GMT

Hi,

yes we have two PSN, even if I force to redirect to PSN02 the error still the same

Re: 5400 Authentication failed

Rob Ingram — Tue, 03 Dec 2024 13:53:39 GMT

@Ruelb2214 do you have a load balancer that could be causing issues here?

Does this happen on all switches or just one/a couple?

FYI, ISE 2.7 is EOL, I would recommend you plan to upgrade asap - 3.3 patch 3 is the latest recommended version.