topic Re: How to Universal Switch Configurations for 16.X Code 3650/3850/9x00 in Network Access Control

How to Universal Switch Configurations for 16.X Code 3650/3850/9x00

Axxiom — Mon, 22 Jan 2018 23:49:19 GMT

I am currently looking for any guides that are updated with correct information for 16.6.X Code running on 3650/3850/9300/9400/9500 platforms.

IP device tracking replacement for 16.X Code - SISF is the current replacement
IBNS 2.0 Is required for 16.6.x Code and on – I would like an updated document for this for 9x00 platforms running 16.6.x code
Interface configurations with the above changes applied for port configurations.

Re: How to Universal Switch Configurations for 16.X Code 3650/3850/9x00

ognyan.totev — Tue, 23 Jan 2018 13:01:03 GMT

Yes i need it too.Software Configuration Guide, Cisco IOS XE Denali 16.1.x (Catalyst 3650 Switches) - Configuring IPv6 First Hop Security…

This is only what i found

Re: How to Universal Switch Configurations for 16.X Code 3650/3850/9x00

hariholla — Tue, 23 Jan 2018 19:06:48 GMT

Hi Chris43290, we are working on an updated design guide for the switch configurations.

You need device-tracking command under every single interface with 16.X code. This is as part of the SISF changes.

There's isn't any changes that we are aware of for IBNS 2.0. Here's the IBNS 2.0 guide for you:

How To: Universal 3850 Wired Class-based Policy Language (C3PL) Configuration for ISE

Hope this helps,

~Hari

Re: How to Universal Switch Configurations for 16.X Code 3650/3850/9x0

Arne Bier — Wed, 27 Apr 2022 04:05:50 GMT

Hi @hariholla - I am looking for a detailed Cisco IBNS 2.0 guide that explains the C3PL events and classes in more detail. I was unable to access the link from you last post in 2018. Do you have any other resources you can share? Although I am quite familiar with the C3PL config and I have used it many times, I still feel like it deserved a state-machine type of diagram that shows the even driven nature of this technology. We are used to reading IOS configs from top to bottom and this can be misleading in the case of C3PL because events are asynchronous.

I also wonder what the definition of a "failure" is when used in cases like

class XYZ do-until-failure .... so "session started" can experience different types of failures, as opposed to say, event authentication failures. It might be obvious to Cisco, but it would make it easier if we had a listing of what "failures" this C3PL can handle in each event category.

I don't see much written about the event that handles violations (MAC address related).

Re: How to Universal Switch Configurations for 16.X Code 3650/3850/9x0

George_Spl — Mon, 03 Apr 2023 13:36:26 GMT

Hello All,

How can I download the guide?

How To: Universal 3850 Wired Class-based Policy Language (C3PL) Configuration for ISE

I get a message that I am not authorize to download.

Please help!

Thanks.