topic Re: Cisco Identity Services Engine Network Component Compatibility in Network Access Control

Cisco Identity Services Engine Network Component Compatibility

hanguye3 — Tue, 09 Oct 2018 09:11:24 GMT

Hi team,

I am working on the ISE project and below is our customer’s network devices:

No	Type	OS Version
No	Type	OS Version
1	WS-C2960+24TC-L	15.0(2)SE6
2	WS-C2960-24TC-L	12.2(50)SE5
3	WS-C2960-24TC-L	12.2(55)SE7
4	WS-C2960-24TT-L	12.2(55)SE7
5	WS-C2960-24TT-L	12.2(44)SE6
6	WS-C2960-24TC-S	12.2(50)SE5
7	WS-C2960S-24TS-S	12.2(55)SE8
8	WS-C2960S-24TS-S	12.2(55)SE9
9	WS-C2960X-24TS-LL	15.2(2)E6
10	WS-C2960X-24TS-LL	15.0(2A)EX5
11	WS-C2960X-24TS-LL	15.2(2)E3
12	WS-C2960X-24TS-LL	15.2(2)E4
13	WS-C2960X-24TS-LL	15.2(2)E5
14	WS-C3750G-24TS-S1U	12.2(40)SE
15	WS-C3750G-48TS-S	12.2(35)SE2
16	WS-C3750X-48T-S	15.0(2)SE5
17	WS-C3750X-48T-S	15.2(2)E4
18	WS-C3750X-48T-S	15.0(2)SE6
19	WS-C3750X-48T-S	15.0(2)SE8
20	CE500-LANBASE-M	12.2(25)SEG4
21	CISCO1841	12.4(15)T13
22	CISCO1941/K9	15.2(4)M6
23	CISCO1941/K9	15.0(1)M4
24	CISCO1941/K9	15.0(1)M5
25	CISCO2811	12.4(24)T2
26	CISCO2911/K9	15.2(4)M1
27	CISCO2911/K9	15.0(1)M5
28	CISCO2951-SEC/K9	15.2(4)M3
29	CISCO2951-SEC/K9	15.3(2)T
30	WS-C2950-24	12.1(22)EA6
31	WS-C2950-24	12.1(22)EA9
32	WS-C2950-24	12.1(22)EA4
33	WS-C2950T-24-PR	12.1(22)EA14
34	WS-C3750G-48TS-S	12.2(40)SE
35	WS-C3750X-24T-S	12.2(55)SE5
36	WS-CE500-24TT	12.2(25)SEG
37	WS-CE500-24TT	12.2(25)SEG4
38	WS-CE500-24TT	12.2(25)SEG6
39	EX2300-24T	JUNOS 15.1X53-D58.3

From the ISE Network Component Compatibility – 2.4 (https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/compatibility/b_ise_sdt_24.html), I see that we still support the 2960 and 3750 switch (but need to upgrade the OS for full features supported).

But the document not mention about these devices, like CE500-LANBASE-M, CISCO1841, CISCO1941/K9, CISCO2811, CISCO2911/K9, CISCO2951-SEC/K9, WS-C2950-24, WS-CE500-24TT, EX2300-24T.

Kindly help to share with us the official document that prove the support among ISE and these devices, which version and which features of those devices that ISE support?

Note that: our main competitor of this project is ForeScout and they confirmed that they can support all these devices.

Highly appreciate for any quick response.

Br,

hainm

Re: Cisco Identity Services Engine Network Component Compatibility

Nidhi — Tue, 09 Oct 2018 09:18:14 GMT

Hi,

What you see in the compatibility guide are the platforms and versions tested by the team. But this does not mean, we do not support all the other mentioned platforms.

the requirement for a network device to work with ISE is to support standard Radius for basic AAA capabilities and CoA and url redirect for other use cases .

we have several ways in which we can work with low end Cisco switches as well as third party network devices.

please refer this link for more information -

https://community.cisco.com/t5/security-documents/does-ise-support-my-network-access-device/ta-p/3650231

It will also help to check the data sheet for the specific platforms to check what it supports.

Thanks,

Nidhi

Re: Cisco Identity Services Engine Network Component Compatibility

hanguye3 — Tue, 09 Oct 2018 09:34:43 GMT

Hi bro,

Many thanks for your response. But my concern is we might support those old devices with basic AAA capabilities and CoA and url redirection, but we do not have any official document to show which version and features that ISE support...

I am not sure that our customer accept this link as an official answer. Kindly help to advise.

Many thanks bro.

Br,

hainm