cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

251
Views
0
Helpful
1
Replies
Highlighted
Beginner

ISE PSN rejecting RADIUS request

Hi,
 

We have a distributed ISE infrastructure version 1.3.

We begin noticing the following problem.

Randomly the PSN's started dropping radius requests.

Basically they didn't serviced any client.

 

It looked like this bug:

 

ISE PSN rejecting RADIUS request; deadlocks found @ catalina.out

CSCur43427

Symptom:
++ CU runs distributed deployment; 2PSN +MnT +PMN;
++ PSN "node status were up during the issue;
++ PSNs were rejecting RADIUS request; ICMP reachability to PSN were OK;

++ both wired and wireless are affected
++ removing accounting from both foreign/anchor did not fix the issue;

Conditions:
++ ISE 1.2.0.p10
++ happens every 2-3 weeks;

Workaround:
++ restart ISE services;

 

So we installed patch 2.

But now we got the same problem and there is no newer patch.

 

Did anyone encountered this also?

 

thanks,

laszlo

 

 

 

1 REPLY 1
Highlighted
Participant

We've also encountered this with 1.3 and logged a TAC case but unfortunately they weren't able to determine the cause due to not enough detail. They suggested changing the log level for runtime-AAA and prrt-JNI to debug temporarily and when it happens again, before restarting the PSN, download the logs from it to supply to TAC.
 

Content for Community-Ad