topic ISE IOS 16.X Configuration Example in Network Access Control https://community.cisco.com/t5/network-access-control/ise-ios-16-x-configuration-example/m-p/3586317#M509710 <HTML><HEAD></HEAD><BODY><P>Looking for IOS 16.x configuration example.&nbsp; Specifically looking at device tracking.&nbsp; Do you create two policies?&nbsp; One for Access port and or VLAN, and one for trunk ports (to disable)?&nbsp; Do you apply tracking policy to interface and or VLAN?</P></BODY></HTML> Tue, 22 May 2018 22:12:45 GMT Jefkelle 2018-05-22T22:12:45Z ISE IOS 16.X Configuration Example https://community.cisco.com/t5/network-access-control/ise-ios-16-x-configuration-example/m-p/3586317#M509710 <HTML><HEAD></HEAD><BODY><P>Looking for IOS 16.x configuration example.&nbsp; Specifically looking at device tracking.&nbsp; Do you create two policies?&nbsp; One for Access port and or VLAN, and one for trunk ports (to disable)?&nbsp; Do you apply tracking policy to interface and or VLAN?</P></BODY></HTML> Tue, 22 May 2018 22:12:45 GMT https://community.cisco.com/t5/network-access-control/ise-ios-16-x-configuration-example/m-p/3586317#M509710 Jefkelle 2018-05-22T22:12:45Z Re: ISE IOS 16.X Configuration Example https://community.cisco.com/t5/network-access-control/ise-ios-16-x-configuration-example/m-p/3586318#M509712 <HTML><HEAD></HEAD><BODY><P>Hi Jeffery,</P><P></P><P>It is good to apply policy in interface with protocol dhcpv4/v6 and tracking enabled.</P><P>Trusted port takes preference. Other options are used as needed.</P><P>Reason is that we need to track multiple devices connected to the port if it is multi-host.</P><P></P><P>That said, please check with the switching team for best practices if you should use VLAN over interface and relative advantage etc.</P><P></P><P>Thanks</P><P>Krishnan</P></BODY></HTML> Wed, 23 May 2018 00:14:20 GMT https://community.cisco.com/t5/network-access-control/ise-ios-16-x-configuration-example/m-p/3586318#M509712 kthiruve 2018-05-23T00:14:20Z