Authentication Summary
Logged At: June 16,2022 12:14:22.475 PM
RADIUS Status: RADIUS Request dropped : 24444 Active Directory operation has failed because of an unspecified error in the ISE
NAS Failure:
Username: CNTKAS\10368071
MAC/IP Address: 28:16:AD:69:68:F6
Network Device: WLC-01 : 10.100.47.126 :
Allowed Protocol: Default Network Access
Identity Store: AD1
Authorization Profiles:
SGA Security Group:
Authentication Protocol : PEAP(EAP-MSCHAPv2)
Authentication Result
RadiusPacketType=Drop
AuthenticationResult=Error
Related Events
Authentication Details
Logged At: June 16,2022 12:14:22.475 PM
Occurred At: June 16,2022 12:14:22.474 PM
Server: TKECC-ISE-01
Authentication Method: dot1x
EAP Authentication Method : EAP-MSCHAPv2
EAP Tunnel Method : PEAP
Username: CNTKAS\10368071
RADIUS Username : CNTKAS\10368071
Calling Station ID: 28:16:AD:69:68:F6
Framed IP Address:
Use Case:
Network Device: WLC-01
Network Device Groups: Device Type#All Device Types,Location#All Locations
NAS IP Address: 10.100.47.126
NAS Identifier: TKECC-AC-WLC5508-1
NAS Port: 1
NAS Port ID:
NAS Port Type: Wireless - IEEE 802.11
Allowed Protocol: Default Network Access
Service Type: Framed
Identity Store: AD1
Authorization Profiles:
Active Directory Domain: cn.thyssenkrupp.as
Identity Group:
Allowed Protocol Selection Matched Rule: Wireless
Identity Policy Matched Rule: Default
Selected Identity Stores: AD1
Authorization Policy Matched Rule:
SGA Security Group:
AAA Session ID: TKECC-ISE-01/438773311/125377
Audit Session ID: 0a642f7e00041ef35760a16b
Tunnel Details: Tunnel-Type=(tag=0) VLAN,Tunnel-Medium-Type=(tag=0) 802,Tunnel-Private-Group-ID=(tag=0) 3
Cisco-AVPairs: audit-session-id=0a642f7e00041ef35760a16b
Other Attributes: ConfigVersionId=10,Device Port=32774,DestinationPort=1812,RadiusPacketType=AccessRequest,Protocol=Radius,ExternalErrorCode=65538,Framed-MTU=1300,State=37CPMSessionID=0a642f7e00041ef35760a16b;39SessionID=TKECC-ISE-01/438773311/125377;,Acct-Session-Id=5760a15b/28:16:ad:69:68:f6/378716,attribute-89=00:,attribute-131=00:00:00:01,Airespace-Wlan-Id=5,CPMSessionID=0a642f7e00041ef35760a16b,EndPointMACAddress=28-16-AD-69-68-F6,Device Type=Device Type#All Device Types,Location=Location#All Locations,Device IP Address=10.100.47.126,Called-Station-ID=24-b6-57-b4-6f-10:CT-FT
Posture Status:
EPS Status:
Steps
11001 Received RADIUS Access-Request
11017 RADIUS created a new session
Evaluating Service Selection Policy
15048 Queried PIP
15048 Queried PIP
15048 Queried PIP
15048 Queried PIP
15004 Matched rule
11507 Extracted EAP-Response/Identity
12500 Prepared EAP-Request proposing EAP-TLS with challenge
11006 Returned RADIUS Access-Challenge
11001 Received RADIUS Access-Request
11018 RADIUS is re-using an existing session
12301 Extracted EAP-Response/NAK requesting to use PEAP instead
12300 Prepared EAP-Request proposing PEAP with challenge
11006 Returned RADIUS Access-Challenge
11001 Received RADIUS Access-Request
11018 RADIUS is re-using an existing session
12302 Extracted EAP-Response containing PEAP challenge-response and accepting PEAP as negotiated
12318 Successfully negotiated PEAP version 0
12800 Extracted first TLS record; TLS handshake started
12805 Extracted TLS ClientHello message
12806 Prepared TLS ServerHello message
12807 Prepared TLS Certificate message
12810 Prepared TLS ServerDone message
12305 Prepared EAP-Request with another PEAP challenge
11006 Returned RADIUS Access-Challenge
11001 Received RADIUS Access-Request
11018 RADIUS is re-using an existing session
12304 Extracted EAP-Response containing PEAP challenge-response
12305 Prepared EAP-Request with another PEAP challenge
11006 Returned RADIUS Access-Challenge
11001 Received RADIUS Access-Request
11018 RADIUS is re-using an existing session
12304 Extracted EAP-Response containing PEAP challenge-response
12305 Prepared EAP-Request with another PEAP challenge
11006 Returned RADIUS Access-Challenge
11001 Received RADIUS Access-Request
11018 RADIUS is re-using an existing session
12304 Extracted EAP-Response containing PEAP challenge-response
12318 Successfully negotiated PEAP version 0
12812 Extracted TLS ClientKeyExchange message
12804 Extracted TLS Finished message
12801 Prepared TLS ChangeCipherSpec message
12802 Prepared TLS Finished message
12816 TLS handshake succeeded
12509 EAP-TLS full handshake finished successfully
12305 Prepared EAP-Request with another PEAP challenge
11006 Returned RADIUS Access-Challenge
11001 Received RADIUS Access-Request
11018 RADIUS is re-using an existing session
12304 Extracted EAP-Response containing PEAP challenge-response
12313 PEAP inner method started
11521 Prepared EAP-Request/Identity for inner EAP method
12305 Prepared EAP-Request with another PEAP challenge
11006 Returned RADIUS Access-Challenge
11001 Received RADIUS Access-Request
11018 RADIUS is re-using an existing session
12304 Extracted EAP-Response containing PEAP challenge-response
11522 Extracted EAP-Response/Identity for inner EAP method
11806 Prepared EAP-Request for inner method proposing EAP-MSCHAP with challenge
12305 Prepared EAP-Request with another PEAP challenge
11006 Returned RADIUS Access-Challenge
11001 Received RADIUS Access-Request
11018 RADIUS is re-using an existing session
12304 Extracted EAP-Response containing PEAP challenge-response
11808 Extracted EAP-Response containing EAP-MSCHAP challenge-response for inner method and accepting EAP-MSCHAP as negotiated
Evaluating Identity Policy
15006 Matched Default Rule
15013 Selected Identity Store - AD1
24430 Authenticating user against Active Directory
24444 Active Directory operation has failed because of an unspecified error in the ISE
22059 The advanced option that is configured for process failure is used
22062 The 'Drop' advanced option is configured in case of a failed authentication request
12315 PEAP inner method finished with failure
22028 Authentication failed and the advanced options are ignored
