topic Re: ISE with Dell switches in Network Access Control

ISE with Dell switches

ymadheka — Fri, 03 Mar 2017 06:42:47 GMT

Hi Folks,

Has anyone had experience of ISE working with Dell switches, since it is not listed in the compatibility matrix is there any tested list of features that can worked upon.

Appreciate for any help.

Thanks & Regards,

Yogesh Madhekar

Re: ISE with Dell switches

ymadheka — Fri, 03 Mar 2017 06:43:50 GMT

The customer is using the below Dell switches:

N 2048P --- Layer 2 Switch

N 4064F --- Layer 3 Switch

Re: ISE with Dell switches

Timothy Abbott — Fri, 03 Mar 2017 14:51:33 GMT

Yogesh,

We haven't tested with Dell switches. That's why they aren't listed in the compatibility matrix. ISE is a standards-based RADIUS server. So long as they are standards compliant we will work with them. For advanced use case support, the switches will need to support RADIUS CoA and some form of URL-redirection.

Regards,

-Tim

Re: ISE with Dell switches

Jason Kunst — Fri, 03 Mar 2017 14:57:19 GMT

Please do keep in mind even if the switches don't support URL redirect or RADIUS COA it may work with new feature in ISE 2.1

Please check out this guide for 3rd party support and other scenarios.

Will need to validate this and test in the lab with the switches

http://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_01000.html#concept_CDD87F6FE3A54351B27FF35316A23DA3

Re: ISE with Dell switches

Leonardo Neves — Mon, 08 Mar 2021 18:13:58 GMT

Yes, it works.

I've already deployed ISE with N2000 Series using Dell OS 6. DOT1X, Mab Authentication, dACL or Filter-ID and Dynamic Vlan Assignment. You just need to create the authorization profiles attributes manually.

cisco-av-pair for dACL, Tunnel-medium-type and so on.

Dell OS 6.6 also supports CoA and URL-Redirect but I didn't deployed it.

Re: ISE with Dell switches

Guillermo F. — Thu, 12 May 2022 16:07:14 GMT

Hello Leonardo,

I'm actually working on a project integrating Dell (N Series) NAD's into ISE and would appreciate a clean copy of the switch config if you can provide it. I have the Cisco config but I would like to compare it to Dell's

Thanks!

Re: ISE with Dell switches

Leonardo Neves — Thu, 12 May 2022 17:12:22 GMT

Hi Guilhermo,

Follow the last firmware version that I've implemented, using this version I also validated TACACS+ and Downloadable ACL via Dot1x, and works really fine.

The script bellow does not have TACACS+ and dACL but you can find how to configure easily on manuals.

!System Description "Dell EMC Networking N2048, 6.6.0.13, Linux 3.6.5-e3cd5a07, Not Available"
!System Software Version 6.6.0.13
!
authentication enable
authentication dynamic-vlan enable
dot1x system-auth-control
aaa authentication dot1x default radius
aaa authorization network default radius
mab request format attribute 1 groupsize 12 separator . lowercase
radius server auth 1.1.1.1
name "RADIUS_NAME"
timeout 3
retransmit 5
key 7 "MY_KEY"
exit
!
interface Gi1/0/1
spanning-tree portfast
switchport mode general
authentication host-mode multi-auth
mab
authentication order mab dot1x
exit
!

Re: ISE with Dell switches

Matteo Abrile — Thu, 26 May 2022 13:15:28 GMT

Hello,

some one have network device profiles for DELL series N ?

Thanks

Re: ISE with Dell switches

ahollifield — Thu, 26 May 2022 20:35:50 GMT

https://www.network-node.com/blog/2018/11/10/vendor-specific-dictionaries-for-ise

Re: ISE with Dell switches

jlaguerre — Tue, 07 Feb 2023 14:34:14 GMT

Hi Leonardo, I am trying to connect a Dell 3524P switch to ISE with no luck. Any assistance will be greatly appreciated. I have downloaded the Dell EMC Vendor Specific RADIUS Dictionaries for ISE from the following link https://www.network-node.com/blog/2018/11/10/vendor-specific-dictionaries-for-ise and imported into ISE. I add switch as NAD using profile created from VSA, and configured my switch with configs from above. Checking my live logs on ISE, I am not seeing any activity for the Dell Switch, not even a Deny Access.

Re: ISE with Dell switches

esotelo86 — Tue, 28 Nov 2023 02:37:04 GMT

Hi Leonardo.

Could you help me on how to configure the authorization profile?
I have not been able to get the posture to work.