cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

Who Me Too'd this topic

ISE 3.1 - handful of supplicants declining auth when others work

adam imbruglio
Level 1
Level 1

Good morning,

My organization has set up ISE (3.1.0.518) for network access control; all of our laptops are running Windows 11 and we have group policy pushing TEAP settings to them.  This is working for the vast majority of the 700 or so laptops currently connected, but we have a handful of devices that refuse to connect to the ISE protected network.  At this time these are all Dell Latitude 5410s running up-to-date Windows 11 enterprise, with the same settings as all the other machines.  When they try to connect though, they only show up as host/<pcname.domainame>,No user authentication is occurring.  Checking the logs shows

 

11515Supplicant declined inner EAP method selected by Authentication Policy but did not proposed another one; inner EAP negotiation failed

We've tried updating the wireless drivers, switching out the wireless cards, re-imaging the machines, but these laptops still refuse to get past this; I can't figure out what's different with them from all the others that are working fine.

Full radius log is attached.

Does anyone have any idea why this might be failing?

Who Me Too'd this topic