topic Re: ISE Dot 1 X Authentication in Network Access Control

ISE Dot 1 X Authentication

Dkiptoo — Wed, 11 Jun 2025 12:30:04 GMT

Hi,

I would need some help here. We have an Internal PKI Server integrated with AD and ISE as the AAA server authenticating users and devices. All domain users and machines are automatically placed on internal VLAN upon the dot1x EAP authentication. I have an issue with one account, whenever it logs in regardless of the pc, it shows authentication failed from the network adapter. I am trying to find a way to troubleshoot it. At first it was the certificate that had expired, which I though should be able to renew automatically. I have been trying to find ways to troubleshoot it but still struggling. Any help would greatly be appreciated

Re: ISE Dot 1 X Authentication

Arne Bier — Wed, 11 Jun 2025 21:40:03 GMT

Share the ISE Live Logs Details here - that is the usual starting point.

Did you renew the client cert and try again? Still failed?

Re: ISE Dot 1 X Authentication

Dkiptoo — Fri, 13 Jun 2025 08:58:31 GMT

Hi Bier,

The issue was successfully resolved after doing manual renew of the user cert from the CA. Thank you