topic ISE Raduis Type in Network Access Control

ISE Raduis Type

James Davies — Fri, 15 Mar 2019 09:42:15 GMT

Looking at some ISE Upgrades I have been doing, I have started digging a bit deeper into RADIUS and TACACS+

I am slightly confused with the 2 below,

Radius:NAS-Port-Type EQUALS Virtual

Radius:NAS-Port-Type EQUALS NAS Prompt

To me, they are the same? NAS Prompt would be, for example a switch you are accessing, you would get the login on the PUTTY screen, so that is picked up as NAS Prompt on the ISE, but Virtual is described as SSH/TELNET etc, so the same thing?

Silly question I know, any pointers?

Re: ISE Raduis Type

bern81 — Fri, 15 Mar 2019 11:15:54 GMT

Hi James,

Radius NAS-port-type equal virtual means when the connection is a VPN connection.

You can use this condition in the policy set to match ASA RAVPN connections.

Re: ISE Raduis Type

James Davies — Fri, 15 Mar 2019 11:36:04 GMT

Thanks, but , I dont have any VPN connections coming in? This ISE is using Radius as Device Administration. Perhaps this is not required then...