topic Re: ISE 1.4 - Device Administration - How doing authorization based on user machine IP address (Specify IP address allow to manage device) in Network Security

ISE 1.4 - Device Administration - How doing authorization based on user machine IP address (Specify IP address allow to manage device)

josedunet — Sun, 23 Oct 2016 15:10:07 GMT

Hi All

I am using ISE 1.4 for device administration authentication & authorization. So know when network administrator want to connect to switch and router for administration, they are authenticate and authorize by ISE Radius.

My question is how to given authorization based on IP address of network administrator machine. Specify in authorization IP address allow to connect to device for administration. I don' know how or where specify it. Someone can help me please ?

Thanks in advance.

Re: ISE 1.4 - Device Administration - How doing authorization based on user machine IP address (Specify IP address allow to manage device)

thomas — Mon, 24 Oct 2016 13:12:33 GMT

I believe you're asking for how to do network device administration via the TACACS+ protocol.

TACACS+ is supported in ISE 2.0 and later: ISE 2.0 Release

We have many ISE How-To Guides available that tell you how to do it in the regular ISE Community on the ISE Design & Integration Guides page under Device Administration (TACACS+)

Re: ISE 1.4 - Device Administration - How doing authorization based on user machine IP address (Specify IP address allow to manage device)

ssambourg — Tue, 22 Nov 2016 23:59:08 GMT

Hello,

You can create an ACL on your NAD and add this ACL in the line vty configuration section.