topic Re: Failed to send CHAP authentication request: in General Topics

Failed to send CHAP authentication request:

pacavi — Tue, 09 Jul 2024 19:57:15 GMT

admin@PA-(active)> test authentication authentication-profile ISE-TACACS username XXXX password
Enter password :

Target vsys is not specified, user "XXXX" is assumed to be configured with a shared auth profile.

Do allow list check before sending out authentication request...
name "XXXX" is in group "all"

Authentication to TACACS+ server at '172.31.100.11' for user 'XXXX'
Server port: 49, timeout: 3, flag: 0
Egress: 172.31.129.9
Attempting CHAP authentication ...
CHAP authentication request is created
Sending credential: xxxxxx
Failed to send CHAP authentication request: Network read error: Connection reset by peer

Returned status: -1
Authentication/authorization failed against TACACS+ server at 172.31.100.11:49 for user XXXX

Authentication/authorization failed for user "XXXX"

Re: Failed to send CHAP authentication request:

pacavi — Tue, 09 Jul 2024 20:05:43 GMT

from system logs we can see auth-success, it giving an authorization error.

Re: Failed to send CHAP authentication request:

BPry — Wed, 10 Jul 2024 02:06:23 GMT

@pacavi,

Have you run a debug on ISE and verified things from that side of things. The reset in your test would indicate that ISE hasn't had a network device added to account for the firewall sending requests.

Re: Failed to send CHAP authentication request:

pacavi — Wed, 10 Jul 2024 16:53:20 GMT

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PMYmCAO

I followed the steps from the article above. Now, I can log in successfully, but after logging in, the WebUI tries to load and then kicks me back to the login page.

Re: Failed to send CHAP authentication request:

fhassan — Thu, 15 May 2025 07:06:51 GMT

hello, i'm having similar issue here but my error is Failed to send CHAP authentication request: connect: timed out.

can anyone advise on this?