ISE authetication falied for NAD

[macfrist38]

Hi,

please can you advise for this kind of error ?

Event	5400 Authentication failed
Failure Reason	11014 RADIUS packet contains invalid attribute(s)
Resolution	Check the network device or AAA Client for hardware problems. Also check the network that connects the device to the ISE for hardware problems. Also check whether the network device or AAA Client has any known RADIUS compatibility issues.

Thanks

[nspasov]

What type of device is this? Can you post its AAA configs here?

[RiyadBank-SOC]

Anyone knows

[Jangchup]

I am replying to a very old post with the hope that this might be helpful to someone like me who had this same exact issue.

So I had this similar issue with one my users who is connecting from Cisco AnyConnect client on Windows 10 computer.

[Windows 10 with AnyConnect] -> [ASA] -> [ISE] -> [AD]

After capturing the RADIUS packets by running debug on the ASA Firewall the issues was related to the username! The user was entering incorrect username!

But I think it could be any Radius attributes so the best thing is to run debug commands to see the exact attributes.

The debug commands that I ran was:

debug radius session

debug radius decode

debug radius dynamic-authorization