Guest

Preview Tool

Cisco Bug: CSCuj47338 - Radius response delays seen on ISE with large Internal User store

Last Modified

Feb 20, 2018

Products (1)

  • Cisco Identity Services Engine

Known Affected Releases

1.2(0.899)

Description (partial)

Symptom:
When ISE is configured with large Internal User store, ISE is showing 2-5 seconds delay in sending the Radius Access-Challenges to the WLC. This delay creates AAA Error 'Out of Memory' errors on WLC.

Increasing the Radius Server timeout on the WLC does not help much since the WLC is waiting for the Radius response from ISE and with multiple EAP requests coming on WLC, the Radius queue gets filled up causing AAA Error 'Out of Memory' errors on WLC. The client gets deauthenticated and the EAP transaction starts again.

Conditions:
ISE with a large Internal User store.

Related Community Discussions

Client unable to login into ISE Guest portal
TAC case logged for this problem a few days ago, TAC engineers still unable to find solution A number of Guest users are unable to login to the ISE guest Portal page, some days a particular Guest can login other days the same Guest cannot. This varies day to day. When the Guest is unable to login, I simply remove their mac address on the Foreign and Anchor WLC's. Then straight after, they can login successfully. Guest connects to the Guest SSID, obtain a DHCP, enter a website in the browser like ...
Latest activity: Dec 04, 2013
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.