topic Re: is MIKROTIK service as a LDAP is supported with Cisco ISE in Network Access Control

is MIKROTIK service as a LDAP is supported with Cisco ISE

engahmedsaied — Fri, 21 Feb 2020 18:33:23 GMT

Hello all,

I need to know if anyone has tested MIKROTIK service as a LDAP with cisco ISE ?

from 2.2 compatibility matrix I can see only the following

LDAP Servers

SunONE LDAP Directory Server	Version 5.2
OpenLDAP Directory Server	Version 2.4.23

so MIKROTIK service as a LDAP is not supported with cisco ISE ?!

Re: is MIKROTIK service as a LDAP is supported with Cisco ISE

Karsten Iwen — Sun, 03 Sep 2017 18:26:49 GMT

Not sure if I understand your request right, I only know of a client-functionality in Mikrotik devices.

What you can do:

Authenticate users on the Mikrotic through RADIUS to the ISE and the ISE can use any supported identity store which includes LDAP. Authorizazion is done on the ISE in this usecase.
You also can directly access an LDAP identity store from the Mikrotik, but then you have to handle Authorizazion on the Mikrotik router instead of the ISE.

Re: is MIKROTIK service as a LDAP is supported with Cisco ISE

engahmedsaied — Mon, 04 Sep 2017 01:53:36 GMT

Hello Karsten,

from Cisco ISE I can integrate with active directory and LDAP, but ISE has a sheet for compatability with other systems I need to integrate with MIKROTIK LDAP as LDAP server in ISE to authenticate users from it and authorize them depend on attributes ISE recieve from MIKROTIK LDAP,

so is this possible ?!

Re: is MIKROTIK service as a LDAP is supported with Cisco ISE

Karsten Iwen — Mon, 04 Sep 2017 06:02:55 GMT

Mikrotik is running an LDAP-server that you want to access from the ISE? Sorry, never have heard of that. Perhaps MikroTik can tell you if it is based on OpenLDAP, then at least it should work.