topic Ise 1.3 Inline posture node in Network Access Control

Ise 1.3 Inline posture node

Augustgood — Mon, 11 Mar 2019 05:57:09 GMT

hi,

who can explain me the function of inline posture node ? what feature are linked to to this type of node ?

The IPN is a node that is

Marvin Rhoads — Sun, 02 Aug 2015 13:45:40 GMT

The IPN is a node that is used to provide a subset of services (posture assessment and enforcement) for RADIUS clients communicating via a network access device that does not support the normal Cisco Change of Authorization (CoA) or Web redirection methods.

The most common use case was inline with a Cisco ASA running code prior to 9.2(1). That's what's shown here in the ISE Admin Guide.

With 9.2(1) or later the ASA can be used natively with ISE per this guide.

So, if i understand

Augustgood — Sun, 02 Aug 2015 21:12:19 GMT

So, if i understand correctly, all device like WLC, ASA, SWITCH that support natively CoA do not need an IPN node.

right....?

That's correct, assuming it's

Marvin Rhoads — Mon, 03 Aug 2015 00:13:12 GMT

That's correct, assuming it's Cisco's flavor of CoA (which relies in part on RADIUS A-V pairs which use Cisco's Vendor-Specific Attributes or VSAs).

A third party NAD can support standards-based CoA (via RFCs 3576 and 5176) and not necessarily work with ISE. Aerohive is one such example that I know of.