ISE 1.2 issue with CWA (Error : Your session has expired)

[Mohammad Abu Arja]

Hii

we have ISE deployment with two administration nodes and two service policy nodes running 1.2.1.198 , with CWA for wireless guest users (Cisco WLC) . Suddenly , many guest users faced an issue where login page is redirected but after inserting user/password  it gave ""Your session has expired. Sign on again""

authentication logs on ISE shows:

Event  5418 Guest Authentication Failed
Failure Reason  86017 Session Missing
Resolution  Please contact your Administrator
Root cause  SessionID is missing. Please contact your System Administrator
 

we suspected the bug CSCul10677 , but it is fixed in 1.2.1.198 . We reloaded the two service policy nodes and that resolved the issue temporarily , but it showed back after couple of hours . The issue appeared with some users not all , and with no specific devies or operating systems.

Any idea ?

Regards,

Mohammad

[mohanak]

Please refer the link : https://supportforums.cisco.com/discussion/12131531/ise-12-guest-access-session-expired

Workaround:

Terminate session from admin UI and type in the original URL to redirect to guest portal with a new session-id.

Disconnect SSID, wait for a few minutes, reconnect and enter the original URL to redirect to guest portal with the new session-id.

[Mohammad Abu Arja]

Hi

Thanks for the reply.

Actually the workaround you suggested is for a bug fixed in 1.2.1.198  . Also, how exactly to terminate session from admin UI ? you mean from the wireless controller or the ISE ?

Regards,

Mohammad

[Dassaut Systemes NetSec]

Hi,

I have exactly the same proble and your method "Disconnect SSID, wait for a few minutes, reconnect and enter the original URL to redirect to guest portal with the new session-id." has not resolved my problem.

Any ideas ????