%AUTHMGR-7-RESULT: Authentication result 'server dead' from 'mab'

[Ibrahim Jamil]

Hello Guys

pls see below logs ,i m getting it when AP-MAB needs to authentication/and authorize , i have added correctly the mac of the AP to ISE end points

the SW and the ISE  has successful authentication ,

Switch(config-if)#
*Mar  1 04:19:58.582: %LINK-5-CHANGED: Interface FastEthernet0/1, changed state to administratively down
*Mar  1 04:19:59.580: %ILPOWER-7-DETECT: Interface Fa0/1: Power Device detected: IEEE PD
*Mar  1 04:19:59.589: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to down
*Mar  1 04:19:59.664: %ILPOWER-5-POWER_GRANTED: Interface Fa0/1: Power granted
*Mar  1 04:20:01.233: %LINK-3-UPDOWN: Interface FastEthernet0/1, changed state to down
*Mar  1 04:20:04.379: %LINK-3-UPDOWN: Interface FastEthernet0/1, changed state to up
Switch(config-if)#
Switch(config-if)#
*Mar  1 04:22:10.283: %AUTHMGR-5-START: Starting 'mab' for client (5503.a781.1157) on Interface Fa0/1 AuditSessionID 9601072D0000000400EE12CF
*Mar  1 04:22:10.283: %MAB-5-FAIL: Authentication failed for client (5503.a781.1157) on Interface Fa0/1 AuditSessionID 9601072D0000000400EE12CF
*Mar  1 04:22:10.283: %AUTHMGR-7-RESULT: Authentication result 'server dead' from 'mab' for client (5503.a781.1157) on Interface Fa0/1 AuditSessionID 9601072D0000000400EE12CF
*Mar  1 04:22:10.283: %AUTHMGR-5-FAIL: Authorization failed for client (5503.a781.1157) on Interface Fa0/1 AuditSessionID 9601072D0000000400EE12CF

[Mohammed al Baqari]

Verify the connectivity between switch and ise. The reason of failure is
ise not reachable from switch

[Ibrahim Jamil]

Hello Mohammed

yep , they do reach each other

thanks

[Mohammed al Baqari · Accepted solution]

You need to check radius connectivity on ports 1812 and 1813 udp. If you
type show aaa server in the switch you will see the radius status dead

[Ibrahim Jamil]

Thanks mohamad

[Mohammed al Baqari]

Please remember to rate useful posts