topic Re: Cisco ISE - RADIUS Authentication in Network Access Control

Cisco ISE - RADIUS Authentication

M Talha — Fri, 13 Dec 2024 12:12:41 GMT

Hi All,

I am currently testing (ISE 3.3 patch 4) behind F5 load balancer and able to successfully authenticate TACACS request. Although when I am trying to authenticate endpoints for RADIUS, receiving getting below logs. Currently in the production environment (ISE 2.7) is running smoothly. Should I need to check and specific thing to get this RADIUS authentication issue sorted ?

Re: Cisco ISE - RADIUS Authentication

MHM Cisco World — Fri, 13 Dec 2024 12:32:04 GMT

I will send you some points to check

Thanks for waiting

MHM

Re: Cisco ISE - RADIUS Authentication

Flavio Miranda — Fri, 13 Dec 2024 13:06:14 GMT

@M Talha

How is your ISE deployment? It is one box or multiple box?

If multiple, you may face issue when the F5 load balance the traffic and send the traffic to a new box and not the one that started the process with the end point device.

If that is the case, you need check NAT config on the LB and you may need Virtual server for IP Forwarding

On this link below you will find all the information you need.

https://community.cisco.com/t5/security-knowledge-base/how-to-cisco-amp-f5-deployment-guide-ise-load-balancing-using/ta-p/3631159

Re: Cisco ISE - RADIUS Authentication

thesbrown — Thu, 15 May 2025 21:13:54 GMT

Did you find a solution to this?

Re: Cisco ISE - RADIUS Authentication

thesbrown — Thu, 15 May 2025 21:14:19 GMT

Hello MHM,

Could you also send me the points to check?

Re: Cisco ISE - RADIUS Authentication

M Talha — Tue, 20 May 2025 09:52:00 GMT

Yes sorted out the issue as it was certificate related. Enabled EAP authentication on the certificate and it worked.