cisco ISE | Issue in ISE radius integration with Nokia Siemens devices.

[filipeavelino]

Hi,

I am having a tough time to use the ISE to authenticate the Nokia / Siemens switches. The log in ISE is fine (5200 auth), but Nokia / Siemens switch showed login failed. I have been using the ACS for Nokia / Siemens.

In the logs I see - 22081 Max sessions policy passed - but there are not session limit restrictions for the groups or individual users from the internal identity store.

Any help would be appreciated. Thanks!

BR

Filipe

[thomas]

> Nokia / Siemens switch showed login failed

Please provide actual switch log(s)/message to understand the mismatch between RADIUS Access-Accept on ISE LiveLog details and "login failed" on the switch.

It would help to know what your actual Authorization Profile is that you are returning from ISE to the Nokia Siemens devices. Maybe they need more than an Access Accept to enable the port? A VLAN assignment? They shouldn't need Vendor-Specific attributes for basic access.

[Marcelo Morais]

Hi @filipeavelino ,

 when you said "I see - 22081 Max sessions policy passed - but there are not session limit restrictions for the groups or individual users from the internal identity store." ... please take a look at:

Administration > System > Settings > Max Sessions
check the config of the User and Group tab

Hope this helps !!!