ISE PSN rejecting RADIUS request

[laposilaszlo]

Hi,
 

We have a distributed ISE infrastructure version 1.3.

We begin noticing the following problem.

Randomly the PSN's started dropping radius requests.

Basically they didn't serviced any client.

It looked like this bug:

ISE PSN rejecting RADIUS request; deadlocks found @ catalina.out

CSCur43427

Symptom:
++ CU runs distributed deployment; 2PSN +MnT +PMN;
++ PSN "node status were up during the issue;
++ PSNs were rejecting RADIUS request; ICMP reachability to PSN were OK;

++ both wired and wireless are affected
++ removing accounting from both foreign/anchor did not fix the issue;

Conditions:
++ ISE 1.2.0.p10
++ happens every 2-3 weeks;

Workaround:
++ restart ISE services;

So we installed patch 2.

But now we got the same problem and there is no newer patch.

Did anyone encountered this also?

thanks,

laszlo

[M. Wisely]

We've also encountered this with 1.3 and logged a TAC case but unfortunately they weren't able to determine the cause due to not enough detail. They suggested changing the log level for runtime-AAA and prrt-JNI to debug temporarily and when it happens again, before restarting the PSN, download the logs from it to supply to TAC.