My cisco ISE server is on a remote VM and i have installed free radius tool eapol_test to test EAP-TLS authentication. When i send auth request to eapol_test tool, it times out at the client end and gives error message "11007 Could not locate Network Device or AAA Client" at ISE server end. I tried connected them throug VPN which brings ISE and eapol_test client on same network but to no relief.

  • Can the devices ping each other?
    – Ron Trunk
    Dec 24 '19 at 13:22
  • For the source IP of your eapol_test running system, did you add a "Network Device" record to the ISE? See: Administration -> Network Resources -> Network Devices, with the appropriate details such as Type, IP address and most importantly Shared Secret ? Dec 24 '19 at 13:26
  • ISE cannot ping the switch, although they exist on same network connected through vpn. Although switch can ping ISE server.
    – zahid-dev
    Dec 26 '19 at 6:26
  • The network device is indeed added with correct settings.
    – zahid-dev
    Dec 26 '19 at 6:28
  • Well, it still looks a lot like the ISE does get the request but for some reason does not want to answer. The ISE does give a hint with claiming that 11007 Could not locate Network Device or AAA Client. Does the log entry on the ISE have details about which IP address caused this error, and does that entry match the IP you are expecting? Dec 27 '19 at 10:51

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.