topic This message says, Radius in Network Access Control

ISE 1.2 rejects RADIUS messages from 5508 WLC

Nicholas Poole — Tue, 26 Mar 2019 00:31:48 GMT

The setup in ref is:

WLC 5508 HA pair running 7.6 talking to ISE 1.2 patch 7 (was 6).

Wireless users are authenticated fine, so the 5508 is a valid NAD in ISE, but...

When I setup active RADIUS fallback, so that the WLC can poll the ISE servers I get the message:

"The RADIUS request from a non-wireless device was dropped because the installed license is for wireless devices only"

Why would ISE drop a RADIUS message from a WLC which is a wireless device? Surely this is a mistake?

This message says, Radius

Saurav Lodh — Mon, 28 Apr 2014 10:30:15 GMT

This message says, Radius authentication request is coming form NON- wireless devices. Check if the same ISE is Radius for NAD like Switches. In order to support wired devices ( base and advance License features ) in addition to wireless , you need to have Wireless upgrade license.

Hi Nicholas,This is a known

Jatin Katyal — Mon, 28 Apr 2014 14:17:59 GMT

Hi Nicholas,

This is a known defect.

CSCug34679 ISE drop keep alive coming from WLC.

Symptom:
ISE drops keep alive authentications coming from the WLC, with message 11054 Request from a non-wireless device due to installed wireless license.
Conditions:
When only a wireless license is install on the ISE and using active keep alive on the WLC.
Workaround:
Use passive keep alive on the WLC and not active.

Regards,

Jatin Katyal

*Do rate helpful posts*