11007 could not locate network device or aaa client

[Ali Bahnam]

Dears,

I have two redundant WLC and two ISE configured as primary and secondary.

I configured the Dot1x and users authenticated successfully, but my issue that i'm still receiving this error message (11007 could not locate network device or aaa client).

Any ideas or suggestions highly appreciated,

[nspasov]

Hello Ali-

Are both of the WLCs listed as NADs under ISE (Administration > Network Devices)? And have you confirmed that the AAA secret matches on both ends?

Thank you for rating helpful posts!

[Ali Bahnam]

Hi Neno,

the AAA are matches.

Regarding the NADs (2x WLC) are listed under the ISE, and I think this is my issue.

When I configured the SSO on the WLCs now I can ping only one ip for the both WLCs. So should I configured two NADs under the ISE with same IP?

[nspasov]

What type of controllers are you using? And are you running them in HA? (Behind one virtual IP address)

Thank you for rating helpful posts!

[Ali Bahnam]

I have Cisco 5508 WLCs with HA (SSO) configuration.

So in ISE under NW devices I should put one WLC IP? 

[nspasov]

The last time I did this I had one IP per HA pair. 

Thank you for rating helpful posts!

[Venkatesh Attuluri]

Active and standby WLC share same IP address so you can add it as NAD IP

[mohanak]

ISE NAD Import via CSV passes with invalid IP, unable to load NAD config

CSCur65990

Description

Symptom:
RADIUS requests dropped due to failure reason "11007 Could not locate Network Device or AAA Client", even though they are successfully loaded in ISE.

Conditions:
Issue with Network Device import via CSV.

Known Affected Releases:

(2)

1.2(0.912)

1.3(0.876)