ISE 1.2 rejects RADIUS messages from 5508 WLC

[Nicholas Poole]

The setup in ref is:

WLC 5508 HA pair running 7.6 talking to ISE 1.2 patch 7 (was 6).

Wireless users are authenticated fine, so the 5508 is a valid NAD in ISE, but...

When I setup active RADIUS fallback, so that the WLC can poll the ISE servers I get the message:

"The RADIUS request from a non-wireless device was dropped because the installed license is for wireless devices only"

Why would ISE drop a RADIUS message from a WLC which is a wireless device?  Surely this is a mistake?

[Saurav Lodh]

This message says, Radius authentication request is coming form  NON- wireless devices. Check if the same ISE is Radius for NAD like Switches. In order to support wired devices ( base and advance License features )  in addition to wireless , you need to have Wireless upgrade license.

[Jatin Katyal · Accepted solution]

Hi Nicholas,

This is a known defect.

CSCug34679    ISE drop keep alive coming from WLC. 

<B>Symptom:</B>
ISE drops keep alive authentications coming from the WLC, with message 11054 Request from a non-wireless device due to installed wireless license.
<B>Conditions:</B>
When only a wireless license is install on the ISE and using active keep alive on the WLC.
<B>Workaround:</B>
Use passive keep alive on the WLC and not active.

Regards,

Jatin Katyal

*Do rate helpful posts*