cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

347
Views
0
Helpful
1
Replies
Highlighted

ISE 1.2 Patch 2 External RADIUS Server Sequence Broken?

Hi community,

We have upgraded our proof of concept ISE 1.2 lab to Patch level 2.

Our lab design includes the use of external RADIUS servers which we off-load certain authentication rules to.

To ensure resiliency of the external RADIUS service, we have two of these which we add to a RADIUS Server Sequence, the idea being that if the first in the list is unavailable, ISE will try the second and all will be well.

Now this worked for us in testing ISE 1.2, but I have noticed that after the upgrade to Patch 2 ISE is sending the majority RADIUS traffic to the first (failed) external RADIUS server, with only the odd RADIUS Access-Request to thte next in the list.

Anybody else come across this??

All helpful comments rated!

Many thanks, Ash.

1 REPLY 1
Cisco Employee

ISE 1.2 Patch 2 External RADIUS Server Sequence Broken?

I couldn't find any known issues with this feature. Could you please paste the screen shot of external radius sequence and configuration. Also, how are we determing that the first server in the sequence is DEAD?

~BR
Jatin Katyal

**Do rate helpful posts**

~Jatin Katyal