I'm setting up a new SDA environment for a customer. They have DNAC 126.96.36.199, ISE 3.1p3, 9500 borders running 17.6.4 and WS-C3650-12X48FD edge switches running 16.12.3s (currently only 2x test edge switches).
I noticed in the ISE RADIUS live logs there are multiple CTS errors for both switches (see attached).
Looks like the switch is trying to communicate with ISE using an unsupported SSL/TLS version which is causing the handshake to fail?
Any idea where I go from here?
I checked Settings > Security settings and these are set to (what I guess are) their defaults: TLS 1.0 and SHA1 ciphers disabled and everything else enabled.