ISE : Radius Request Drop

[gandhi.rifal]

I've implementing cisco ise. But i got something weird. The communication cisco ise and switch has down about 1 hours, and when i check on monitoring, the report just said Radius Request Drop. The communication is good before this happening. Do you know what is happen?

Regards,

Gandhi

[jrabinow]

Suggest to stop and start the server. I think this will rectify this

[gandhi.rifal]

I think the problem has solved now.

But, what i want to know is what is happening, there is a bug on Cisco ISE?

Regards,

Gandhi

[rezaalikhani]

Hi;

Based on the "ISE Posture Improvements with Light Data Distribution" Cisco Live session, ISE drops a RADIUS packet in two circumstances:

First. If a RADIUS packet is in process by ISE for an endpoint, and the switch retransmit the same RADIUS packet to ISE, the second packet will be dropped by ISE.

Second. IE also has a default configuration to drop packets encounter a Process Failure. ISE uses this default behavior if cannot access the configured identity store. See the following figure: