topic Re: Multi Vendor Environment in Network Access Control

Multi Vendor Environment

yohh — Tue, 19 Sep 2017 18:12:59 GMT

Hello,

I have a customer with the following question.

Please let me know if there is a resource with the information.

Thank you!

"We have a mixed environment and only need device administration. Will we be able to utilize ISE for tacacs/radius AAA for avaya network equipment, juniper and Cisco. Would this program work for AAA administration for the systems listed above?"

Re: Multi Vendor Environment

bravojared — Tue, 19 Sep 2017 18:39:37 GMT

Yes.

ISE Base license will handle Device Administration over RADIUS.

ISE Device Administration license will handle Device Administration over TACACS+.

All of those vendors support TACACS+, so if you want to see all device administration in one place and manage it the same way use TACACS+ unless a device does not support TACACS+

If you are not using ISE for network access or other features besides Device Administration, your can get the smallest base license possible (L-ISE-BSE-100=), or if your customer has C1 licensing on their devices they may already own Base licenses.

The Device Admin license is also perpetual license (L-ISE-TACACS=)

Once they see ISE, they will probably be interested in looking at more network access functionality, but this will get you started.

Re: Multi Vendor Environment

yohh — Tue, 19 Sep 2017 18:43:07 GMT

Much appreciated.

Thank you!