Cisco ISE

[abderrahman]

Hello, 

i get the message when i try to test the connectivite between my switch and ise:

Attempting authentication test to server-group ISE using radius
No authoritative response from any server.

I assum that the cnfig in switch is correct and i can reach my ISE.

the modele of my switch is : C3560E Software (C3560E-UNIVERSALK9-M), Version 15.2(4)E10

[Rob Ingram]

@abderrahman

Has this worked before or a new deployment?

Is the IP address of the switch defined as a "Network Device" in ISE?

Are the RADIUS servers up? Run "show aaa servers" and provide the output for review.

Please provide your switch configuration.

[abderrahman]

Hello @Rob Ingram ,

=> It's a new deployment.
=> Yes it's defined in network device on ISE

=>Yes the Radius Server is UP, 

but i can't see any output when i try the show aaa servers command eventhough the config is the same in other switch and it's working on it.

[abderrahman]

Hello @Rob Ingram ,

Can u please give me a feedback ? The problem still occured and i can't find a solution yet !

[aleabrahao]

@abderrahman have you checked what I suggested you?

[aleabrahao]

Usually means the switch did not receive a valid RADIUS reply (Access-Accept, Access-Reject, or Challenge) from any configured ISE node.

Check whether ISE sees the request on ISE Operations > RADIUS > Live Logs. If you see nothing, the request is probably not reaching ISE.

[ahollifield]

https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-3750-series-switches/eol_c51-696372.html

https://www.cisco.com/c/en/us/products/collateral/switches/industrial-ethernet-5000-series-switches/eos-eol-notice-c51-744159.html

[Singhaam]

@abderrahman  what are the logs in Operations → RADIUS → Live Logs

any firewall in between switch and  ISE ?

[besart-rexhepi]

Try this
1: Test if you can ping your ISE (radius)
2: Check shared-secret on Switch and ISE under Network Devices.

You should have something like this on you switch:

aaa new-model

aaa group server radius ISE
server name ISE1

radius server ISE1
address ipv4 <IP adress> auth-port 1812 acct-port 1813
key <shared-secret>

In ISE under Network Devices you need to add your switch and shared-secret needs to be exactly identical on both sides