topic ISE EAP Authentication fails in Network Access Control

ISE EAP Authentication fails

Alexmpj376 — Mon, 11 Mar 2019 05:30:30 GMT

I've integrated a new ISE deployment, After a while I start getting the following error below, for wired users, it randomly fails on different users
The NAD I use is WS-C3650-48PD with the following 03.03.03SE cat3k_caa-universalk9 version,

All was working properly for one month, all of a sudden it has started to report such error

I tried to optimize the timers , but it's still the same

Also when I do clear authentication on the same user who has failed the authentication passed

Please advice

Event	5400 Authentication failed
Failure Reason	12953 Received EAP packet from the middle of conversation that contains a session on this PSN that does not exist
Resolution	Verify known NAD issues and published bugs. Verify NAD configuration. Turn debug log on DEBUG level to troubleshoot the problem.
Root cause	Session was not found on this PSN. Possible unexpected NAD behavior. Session belongs to this PSN according to hostname but may has already been reaped by timeout. This packet arrived too late.

IOS-XE has been very

nspasov — Tue, 03 Mar 2015 02:59:35 GMT

IOS-XE has been very problematic. The version of code that you are running is not that old but I would recommend that you upgrade it. I have heard very positive feedback for v.3.7.0 but it is fairly new so if you want to be safe I would suggest running the 3.3.5.

Thank you for rating helpful posts!

Refer the link : https:/

mohanak — Tue, 03 Mar 2015 08:58:56 GMT

Refer the link : https://supportforums.cisco.com/discussion/12264836/ise-ad-8021x-authentication-failure-all-sudden