Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi, all.I haven't been able to find anything out about the term "Step Latency" which is seen in the authentication info for a user in ISE. I have been having an issue where wireless clients are being delayed by a failry reliable time (7500ms) on each...
Hi, all.I'm getting “% Authorization Failed.” on the console when logging in despite the config below - have I missed something here?!aaa new-model!aaa authentication login default localaaa authentication login VTY_AUTH group radius localaaa authoriz...
CONCLUSION
Came on to post about something else and saw this, remembering that I had never returned to update it with the final working config:
aaa new-modelaaa authentication login default localaaa authentication login CON0 localaaa authorization c...
Also seeing this continuously on two 5760s:AIR-CT5760 03.07.00E ct5760-ipservicesk9 Thought maybe to do with multicast IP for the mobility group causing the controller to receive its own packet? Would be great to know if this is a pro...
Sorry for the late reply! Authenticating with user credentials (AD) to ISE; AD group membership is the main authorization parameter in use.It seems like the latency mentioned is more specific to iOS clients and the new 5760 controllers seem to be beh...
Thanks, Jan!I had suspected as much but (like the steps themselves) it is not explicitly clear. This is typical of what we're seeing: 11006Returned RADIUS Access-Challenge( Step latency=7530 ms) The fact that it's always so close to 7500ms makes it s...
Following up on this, I have tried most suggestions with the config currently as follows:!aaa new-model!aaa authentication login default localaaa authentication login CON0 localaaa authentication login VTY_AUTH group radius localaaa authorization con...
