%HA_EM-3-LOG: NAC-RADIUS-FAIL-OPEN-DEAD: All RADIUS servers are dead changing the nac-enforcement ACL to permit all

[gscalia01]

We just implemented ISE 802.1x in couple of our  Cisco 4507 switches  and we are seeing the following error in the log.

%HA_EM-3-LOG: NAC-RADIUS-FAIL-OPEN-DEAD: All RADIUS servers are dead changing the nac-enforcement ACL to permit all

I paste it in the Cisco error message decoder and came back with not found.

Thanks...

[Jimmy Johansson]

Seems like your switch cannot reach the RADIUS-server and therefore is granting access as a fallback. Have you checked your connection to the RADIUS-server(s)?

[gscalia01]

Jimmy,

Srory for the late reply but it turned out to be we needed to add the missing auth data vlan command on the switch. After that the error went away.

Thanks for you input I do appreciate it.

Jack.

[Jimmy Johansson]

No problem, it's a good thing you came back to this thread and posted the solution. It may help other people in the future with the same problem.