Symptom

As per current implementation,ISE supports 2 bytes for the VSA Type, but ISE doesn't support 2 bytes for VSA Length.

Conditions

For example, with using ASR5K RADIUS dictionary "starent.dct", Starent device waits for a 16-bit VSA field but ISE server is sending an 8-bit VSA field in Access-accept.

Workaround

For example, instead of using Starent dictionary which has 2 bytes for VSA lenght, use Starent VSA 1 dictionary.

Further Problem Description