cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

845
Views
0
Helpful
3
Replies
lowfell
Participant

Random Authentication fails on ISE

Random authentication fails. Ssers will generally authnticate but randomly don't . affecting various users all random.

 

5400 Authentication failed

15039 Rejected Per authorization Profile


The Authorization profile though has never changed.

They are on version Ise version 2.4.0357 patch 10

3 REPLIES 3
paul
Advocate

The step data in the details of the failure should tell you what is happening.  Can you post the step data and the rule you think the device should be hitting?

Hello.

 

I have seen the affected mac addresses PASS authentication

The device IS in the correct groups

 

Then Later the SAME device will FAIL authentication?

If you then go int to the Authorization Profile when you look at the fail, the device is no longer in the Profile groups.

 

This is happening randomly and affecting multiple devices. I've actually opened a TAC case now and i'm awaiting assistance. 

 

hslai
Cisco Employee

lowfell,

Yes, you are doing it correctly by engaging Cisco TAC support.

If possible, try establishing a pattern. Otherwise, we would need debug logs for extensive time intervals, try to catch it when it happens again and then analyze the files.

Content for Community-Ad