9800-40 ISE no radius with "password encryption aes"

richard.greene1 · ‎12-12-2022

Running 17.6.4 on 9800-40

2.7.0.356 patch 6 on ISE

When I run "password encryption aes" on the WLC,ISE will not accept clients for DOT1x authentication. works fine before running the command. and after a "no password encryption aes" and reboot it works again.

marce1000 · ‎12-12-2022

- Check logs on WLC and ISE (radius) logs ,

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

richard.greene1 · ‎12-14-2022

defect https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwc79868

Scott Fella · ‎12-14-2022

Must be fixed in later versions. I run Type 6 on my 9800's but also running now 17.9.x and 17.10.x.

-Scott
*** Please rate helpful posts ***

Scott Fella · ‎12-14-2022

I ended up testing this in my home network... I was worried, but I removed type 6 and validated radius/tacacs was working along with a test PSK SSID. Then I migrated to type 6 and everything still functioned. Keep in mind that I'm running a different code version also.

-Scott
*** Please rate helpful posts ***