5417 Dynamic Authorization failed

[Leo TI]

Failure Reason: 11213 No response received from Network Access Device after sending a Dynamic Authorization request

Hello friends
I have an ise VM 3.1.0.518, a 9800 VM controller 17.9.4a, with a guest user redirection page, everything works fine, the client authenticates successfully but does not access the internet, checking I see that the authorization fails. I tested it with another 2504 controller and it works fine.

[marce1000]

        - FYI :  https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwc49580
           It's probably a bug in ISE , make sure to be at least at versions mentioned in 
          Known Fixed Releases ; or above

  M.

[Leo TI]

thanks for the helpI have updated my ISE to patch version 5.
But I still have the same problems

[marce1000]

                 - Report to TAC , 

 M.

[MHM Cisco World]

Policy profile > advanced > aaa policy

Enable both 

Allow aaa override 

NAC state 

MHM

[Leo TI]

Hi MHM

[MHM Cisco World · Accepted solution]

In

Aaa radius server 

Did you enable CoA ? 

Did you config CoA server and it key ?

MHM

[Leo TI]

Thank you very much for putting the information in this field (although it disappears here) and it worked, that's the problem

[MHM Cisco World]

Friend you are so welcome 

Have a nice day 

MHM