Cisco ISE: Dot1x failing and MAB succeeded (Intermittent) /or Posture Delay

[Mubasher Sultan - 2x CCIE # 20149 (R&S | Sec)]

Hi,

We are running the cisco ise 1.1.3 and configured for the Dot1x and MAB authentications. PC's are getting access through MAB while Dot1x failing again and again. But, sometime, same PC is getting authenticating  via Dot1x. Connectivity is intermittent. Also, sometimes, stucks longer in Posture

We have three different switches at the moment with the latest IOS version.

1) WS-C4507R-E    =  15.1(2)SG,

2) WS-C3560-48PS = 12.2(55)SE7

3) WS-C3750X-24P = 15.0(2)SE1

Could you anyone pitch the idea? or advise about the latest IOS for the switches.

Let me know, if you need more information.

Thanks,

Regards,

Mubahser

[Eduardo Aliaga]

It seems your PCs are failing dot1x and also failing MAB authentication, the switch by default will start the process again and will again fail dot1x and MAB authentication, and so on.

It will be helpful to see the logs from both the switch and the radius servers (i take it is ACS or ISE). Also the configuration of the radius server.

[harvisin]

Hello,

Please follow up the link bwlow whoich ma y solve your query:-

http://www.cisco.com/en/US/docs/security/ise/1.0/troubleshooting_guide/ise10_tsg.html#wp185386