DNA & ISE Integration error

[PHUMULANI1976]

I have a problem adding ISE for Network authentication, server is configured for both TACACS and RADIUS on Cisco DNA, but when trying to enable network authentication it says No AAA Server configured. Client/Endpoint authentication uses the same server and I can enable this.

[andy!doesnt!like!uucp]

u should click on ISE radio button (under Srervers) 1st. & on TACACS (under Protocol) for Network
u should click on ISE radio button (under Srervers) 1st. & on RADIUS (under Protocol) for Clients/Endpoints

[PHUMULANI1976]

That has been done and the Client/Endpoint authentication server added successfully, the "Network" authentication - which uses the same ISE server is however not working.

[andy!doesnt!like!uucp]

can u see TACACS IP in Settings / Authentication and Policy Servers / <server> / Edit ? is it the same IP both TACACS&RADIUS?

[andy!doesnt!like!uucp]

so how does your AAA server looks like in Settings / Authentication and Policy Servers / <server> / Edit ?

[PHUMULANI1976]

It's the same box - used for both ISE/AAA.

[andy!doesnt!like!uucp]

did u check if u hit this: https://bst.cisco.com/quickview/bug/CSCwe98700 ?

[PHUMULANI1976]

Thanks, I see this is for DNAC Version 2.3.3.6 & 2.3.3.7 - ISE 2.7,

My environment is DNAC 2.3.5.4 and ISE 3.1