%AAA-3-SERVER_INTERNAL_ERROR: Switch 1 R0/0: sessmgrd: Server

[pnowikow]

Community members,

As of last night, I'm running ISE 2.3 patch 7 (we upgraded from patch 5) and in most of my switch logs I get this error.  Has anyone seen this?  

%AAA-3-SERVER_INTERNAL_ERROR: Switch 1 R0/0: sessmgrd: Server '(null)': No server stats to increment access accept count!

[marce1000]

 - Tough to be the first one, especially with ISE , don't recommend it actually - anyway check if the switch running software version is compatible with this ISE version :

  https://www.cisco.com/c/en/us/support/security/identity-services-engine/products-device-support-tables-list.html

 M.

[pnowikow]

We verified compatibility already. I'm running 16.12.02.

Thanks,

[marce1000]

Check the ISE logs for the particular auth request (too). Are there any
errors ?

M.

[Cristian Matei]

Hi,

   It could be just a coincidence. Check this thread for the solution:

https://community.cisco.com/t5/switching/aaa-3-server-internal-error-on-9300-switches/m-p/4039588

Regards,

Cristian Matei.

[Arne Bier]

I ran into this recently. My customer was using radius server-private instead of radius server.  Do you also use server-private?  Try the regular radius server syntax.

[pnowikow]

We do use server-private and tried to get "radius server" to work but I
couldn't figure out the syntax. Could you provide an example?

[Cristian Matei]

Hi,

     The configuration was posted on the link i provided: https://community.cisco.com/t5/switching/aaa-3-server-internal-error-on-9300-switches/m-p/4039588

radius server FIRST

 address ipv4 x.x.x.x 

 key xxxxx

!

radius server SECOND

 address ipv4 y.y.y.y 

 key yyyyy

!
aaa group server radius RADIUS_GROUP
server name FIRST
server name SECOND
ip radius source-interface Vlan5

Regards,

Cristian Matei

[pnowikow]

Christian,

It took me a little trial and error but I got your instructions to work.  

Thanks a lot!

Pete