5400 Authentication failed

[Ruelb2214]

Hi ALL,

We suddenly encounter issue on Wired connection with ISE, but on wireless no issue at all.

Every time laptop authenticates on wired, we got these logs from ISE:

Failure Reason :12953 Received EAP packet from the middle of conversation that contains a session on this PSN that does not exist
Resolution :Verify known NAD issues and published bugs. Verify NAD configuration. Turn debug log on DEBUG level to troubleshoot the problem.
Root cause: Session was not found on this PSN. Possible unexpected NAD behavior. Session belongs to this PSN according to hostname but may has already been reaped by timeout. This packet arrived too late.

There was no firmware upgrade prior to the issue, could this be error on the PSN service of ISE? is reboot can fix this?

Any advise please.

ISE version : 2.7 patch 4

Switch: WS-C3850-48P 16.12.08

[MHM Cisco World]

You have two PSN?

MHM

[Ruelb2214]

Hi,

yes we have two PSN, even if I force to redirect to PSN02 the error still the same

[Rob Ingram]

@Ruelb2214 do you have a load balancer that could be causing issues here?

Does this happen on all switches or just one/a couple?

FYI, ISE 2.7 is EOL, I would recommend you plan to upgrade asap - 3.3 patch 3 is the latest recommended version.