Symptom

ISE rejects the request as "13017 Received TACACS+ packet from unknown Network Device or AAA Client"

Conditions

Setup ISE 2.2 and configure a network device that has IP address with /24 prefix. When the network device send authentication request to ISE. However, ISE rejects the request as "13017 Received TACACS+ packet from unknown Network Device or AAA Client"

Workaround

To configure the IP address with host prefix such as /32, ISE recognizes the network device and responding to authentication request. Either for individual IP addresses or for an octet range in the form of N1.N2.N3.1-255/32

Further Problem Description