topic ISE & RADIUS VLAN Assignment in Network Access Control

ISE & RADIUS VLAN Assignment

zekebashi — Mon, 11 Mar 2019 07:36:12 GMT

Hello,

See attached diag for clarification!

I am working on implementing 802.1X wired using ISE RADIUS. We have ISE sitting behind a distribution switch(Dist_SW_02). This switch is connected to another distribution switch(Dist_SW_01) via L3. Dist_SW_01 is connected to an access-layer switch via L2/Trunk.

My question is, if we implement RADIUS VLAN-Assignment, will it work since there is an L3 connection between the two distribution switches?

Thanks,

~zK

Hi

Francesco Molino — Tue, 04 Apr 2017 01:13:47 GMT

It doesn't matter that ISE is far from your access switch (NAD) through L3 interfaces.

Your ISE will push the vlan assignment to the authenticator and this switch needs to have this vlan on its database.

Hope this is clear and answers your question.

Thanks

PS: Please don't forget to rate and mark as correct answer if this answered your question

Thank you, Francesco!

zekebashi — Wed, 05 Apr 2017 16:14:07 GMT

Thank you, Francesco!

That's very helpful!!

Best, ~zK

you're welcome!

Francesco Molino — Wed, 05 Apr 2017 16:38:41 GMT

you're welcome!