ISE authentication failing 11007 Could not locate Network Device or AAA Client

[btraister]

Im adding a router to radius authentication.  Configured identically to the other gear (Its a juniper srx1500)

This is the error I get

Source Timestamp	2018-08-08 13:38:28.26
Received Timestamp	2018-08-08 13:38:28.26
Policy Server	lax-net-ise1
Event	5405 RADIUS Request dropped
Failure Reason	11007 Could not locate Network Device or AAA Client
Resolution	Verify whether the Network Device or AAA client is configured in: Administration > Network Resources > Network Devices
Root cause	Could not find the network device or the AAA Client while accessing NAS by IP during authentication.
Endpoint Id	10.0.9.8
NAS IPv4 Address	10.0.102.29

MY Ip is 10.0.9.8 and thats the one that is being complained about.  I have added the devce to ISE with new secret numbers and stil no dice.

[Francesco Molino]

Hi

Can you make sure the source ip used by juniper is the correct one?
Can you maybe share the juniper config?

[Mohammed al Baqari]

Looking for configuring the NAD identity in Juniper. It seems that Juniper
is sending client ID (which is your IP in this case) and it NAD instead of
Juniper IP

[thomas · Accepted solution]

ISE cannot find the NAD IP Address of 10.0.102.29 in the ISE Network Device database @ Administration > Network Resources > Network Devices. Please verify you have added that network device and the appropriate RADIUS pre-shared key for the Juniper Network Device.

ISE will ignore and drop all requests from any unrecognized NAD IPs.