IKEv2 -> AAA] Authorisation request sent - FAIL--FlexVPN anyconnect

[tanyatamir53355]

The last few days i have been throwing everything at the wall to try and get FlexVPN anyconnect to connect to VPN server, for love of god i cannot get past this AAA error?

can anyone one help and decrypt or understand what exactly this means?

many thanks in advanced.

May 19 22:57:27.083: IKEv2:Using mlist AAA_AUTHORIZATION_NETWORK and username admin for group author request
May 19 22:57:27.083: AAA/BIND(00000034): Bind i/f
May 19 22:57:27.083: AAA/AUTHOR (0x34): Pick method list 'AAA_AUTHORIZATION_NETWORK'
May 19 22:57:27.083: IKEv2:(SA ID = 1):[IKEv2 -> AAA] Authorisation request sent - FAIL
May 19 22:57:27.083: IKEv2:(SA ID = 1):[AAA -> IKEv2] Received AAA authorisation response
May 19 22:57:27.083: IKEv2-ERROR:AAA authorization request failed
May 19 22:57:27.087: IKEv2-ERROR:(SESSION ID = 0,SA ID = 1):AAA group authorization failed

May 19 22:57:27.087: IKEv2-ERROR:(SESSION ID = 0,SA ID = 1):
May 19 22:57:27.087: IKEv2:(SESSION ID = 19,SA ID = 1):Verification of peer's authentication data FAILED
May 19 22:57:27.087: IKEv2:(SESSION ID = 19,SA ID = 1):Sending authentication failure notify
May 19 22:57:27.087: IKEv2:(SESSION ID = 19,SA ID = 1):Building packet for encryption.

[howon]

Assuming ISE is the AAA server, would be helpful if you can post the details of ISE authentication or authorization log of the event.

[tanyatamir53355 · Accepted solution]

https://community.cisco.com/t5/vpn/cisco-anyconnect-error-quot-the-ipsec-vpn-connection-was/m-p/4405754#M278557

I have managed to resolve this issue and written a small write up. Anyone facing both of these issue please refer to that.