topic Re: ISE 2.4 and IOS XE 3.3.5 compatibility in Network Access Control

ISE 2.4 and IOS XE 3.3.5 compatibility

Abhishek Pakrashi — Thu, 06 Dec 2018 05:19:44 GMT

As per ISE 2.4 compatibility guide,for 3650: 3.3.5E is the minimum version, however that version is deprecated(as seen switching page CCO ). So, wanted to check if 3.3.5 SE is compatible with ISE 2.4

Re: ISE 2.4 and IOS XE 3.3.5 compatibility

Arne Bier — Thu, 06 Dec 2018 05:54:05 GMT

The Radius and TACACS protocols have not changed much in 15 years or so. Most devices will understand TACACS and since Cisco invented this protocol, all of their devices will work. There are no newer versions of TACACS. Likewise with Radius. I'd be surprised if anyone at Cisco would say that one of their IOS-XE devices was incompatible with ISE.

There might be some attributes that the IOS-XE device doesn't support, but that is not ISE's fault - that's a feature issue on the IOS-XE device. E.g. if you push a Cisco AVPair to the XE device, and it doesn't understand it, then you have an IOS-XE issue, and you need to look at upgrading or enabling the license features.

Re: ISE 2.4 and IOS XE 3.3.5 compatibility

ognyan.totev — Thu, 06 Dec 2018 05:35:06 GMT

In my deployment i have 3650 with 16.3.6 denali everything work fine after 20min ill check the current Ios xe and i will answer.

Re: ISE 2.4 and IOS XE 3.3.5 compatibility

ognyan.totev — Thu, 06 Dec 2018 06:02:08 GMT

Cisco IOS Software [Denali], Catalyst L3 Switch Software (CAT3K_CAA-UNIVERSALK9-M), Version 16.3.6, RELEASE SOFTWARE (fc3)

ROM: IOS-XE ROMMON
BOOTLDR: CAT3K_CAA Boot Loader (CAT3K_CAA-HBOOT-M) Version 3.56, RELEASE SOFTWARE (P)

1 28 WS-C3650-24PS 16.3.6 CAT3K_CAA-UNIVERSALK9

Re: ISE 2.4 and IOS XE 3.3.5 compatibility

Jason Kunst — Thu, 06 Dec 2018 17:16:42 GMT

@Arne Bier is absolutely correct, also spelled out here:

https://community.cisco.com/t5/security-documents/does-ise-support-my-network-access-device/ta-p/3650231