ISE Authentication Fail on Cisco 3560 Switch

[Mehmet Can]

Hello All,

We have Cisco 3650 Switch and using MPLS VPN. Cisco ISE on another site. Switch and ISE communicating with MPLS VPN Line.

My problem: when vpn router is down(line problem, electrical problem or router restart) all client get an Authentication Fail that's ok. But after vpn router is up (vpn line is ok) still get an errors Authtentication Fail. I need to restart the switch for resolve problem and all client Authentication Success after switch restart.

I tried IOS upgrade with suggest version but still same problem.

Console outputs at attachment.

Do you have any idea for my problem?

[andrewswanson]

perhaps when the vpn link goes down the switch RADIUS servers are being marked as dead.

try modifying your radius deadtime from 60 minutes to 5:

radius-server deadtime 5

hth
Andy