cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1816
Views
0
Helpful
2
Replies

CSCvt80488 - 15022 Could not find selected Access Service Resolution Internal Error

crysharris
Level 1
Level 1

We experienced this bug after a power outage affected our upstream routers, disconnecting two PSNs for over an hour, and then multiple power interruptions to the PSNs. Upon restoration of power, the PSNs were back online and 'show application status ise' showed all processes working. External Authentication service to AD test worked normally. However, the PSNs would not authenticate any users via RADIUS and displayed:

15022 Could not find selected Access Service Resolution Internal Error, contact TAC Root cause

 

Many hours later and many attempts to edit and re-commit the Authorized Protocols settings, the outage persisted. 

Re-sync of the affected PSNs was attempted

Eventually, a de-register and register of one of the two PSNs was attempted.

None of these fixed the problem.

 

Eventually, I created a new Authorized Protocol config, same settings different name, and applied it to the Policy Set and authentications immediately began working.

 

I believe this is related to CSCvw66483 where Radius Server Sequence gets corrupted upon changes and the only workaround is to re-create the Radius Server Sequence and then apply it to the policy.

2 Replies 2

jozefklacko
Level 1
Level 1

@crysharris  Thank you for help. This also solved my problem. I had those error logs after restarting ISE thorugh CLI.

"Eventually, I created a new Authorized Protocol config, same settings different name, and applied it to the Policy Set and authentications immediately began working."

 

phoenix.rise
Level 1
Level 1

Hello,
By Authorized Protocol config you mean Authorization profile or something else?