ISE 1.2 HA.

[yusuf.ujjainwala]

I have configured ISE High Availability with two ISE virtual servers.

While testing HA I powered off primary server, after powering off primary server secondary ISE becomes active but not able to authenticate any clients.

ISE supposed to authenticate following types of clients.

1.       Dot1x AD authentication

2.       Guest user CWA

3.       Mac authentication

While trying to connect client with dot1x authentication it is giving following error.

“5440 Endpoint abandoned EAP session and started new”

According to following cisco link this is a bug which is not fix in ISE 1.2.

https://supportforums.cisco.com/thread/2244163

Kindly check attached file for error screenshot.

While connecting guest users it is giving following message for all guest users but no user is able to connect guest network.

“Authentication succeeded”

“session state is authenticated”

[kaaftab]

This issue mentioned is for previous release of ISE and i would suggest you to installed the latest patches. Also do mention the ISE release built number.

Check the link for updates and new releases and troubleshooting(resolution)

http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/release_notes/ise12_rn.html#wp326805

[yusuf.ujjainwala]

ISE Info.

Version	1.2.0.899
Installed Patches	2
Product Identifier (PID)	ISE-VM-K9
Version Identifier (VID)	V01
Serial Number (SN)	8G8L9C6N5PP
ADE-OS Version	2.0.5.250

[yusuf.ujjainwala]

Installed ISE 1.2 patch 5 still not working.

[cciesec2011]

do you have a Cisco TAC opened for this?  If so, what is the TAC case number?

I am very interested in the solution as well because I have a similar setup like yours but I am seeing any issues, YET :-)

[yusuf.ujjainwala]

After configuring fallback on 5760 controller everything started working properly.