Cisco ise 2.1 Session Radius not found

[omer shtivi]

Hello,

We are using ISE 2.1 for guest portal for wireless clients.

The users are created by the sponsor, the guest users are local and there is no AD in this scenario.

Once every few hours when a new client tries to authenticate enter the username password receive "Radius session not found. Please contact help desk for assistance."

On the ISE we see some:

5417 Dynamic authorization failed.

with a failure reason 11103 Radius-client encountered error during processing flow.

We are not sure it's related.

Any ideas why this happens?

Thanks,

Omer Shtivi

[770801tvdhaar]

Are you loadbalancing the guest portal using DNS?

[Gagandeep Singh]

Are you using Anchor-foriegn setup. If yes, disable accounting on Anchor controller. Ensure COA is enabled on Controller where Authentication server is defined.

Regards

Gagan

[dazza_johnson]

I see this error from time to time as well. I note the comment about disabling accounting on the Anchor - is this documetned anywhere or is it a software bug? I want to be sure this is the correct thing to do before I make this change on my production system.

DJ