ISE 2.6 and EHWIC-D-8ESG-P

jmecklenburg — Wed, 22 Apr 2020 20:30:46 GMT

We have a ISE 2.6 with 802.1x in a few site and now we want apply 802.1x wired in all our sites. Some small site have a Cisco 29XX with a EHWIC-D-8ESG-P and I have some doubts about the comtibility with Cisco ISE 2.6. The ISR29XX is marked as compatible with ISE2.6 for "AAA, and AAA include 802.1X, MAB, VLAN Assignment, dACL", that all for me, but I don't konow if also apply for the network module. I don't want a problem with the implementation with this devices.

Any idea?

Re: ISE 2.6 and EHWIC-D-8ESG-P

Greg Gibbs — Wed, 22 Apr 2020 23:36:28 GMT

The ISE Compatibility Guide does not go down to the router module level, but the ISR G2 (19x, 29x, etc) reference indicates that the EHWIC-D-8ESG-P switching module does have the AAA support needed for basic ISE (802.1x, MAB) functions.

The Compat Guide does indicate limited support for Profiling and Guest features, and the module is past End of Software Maintenance so you might strongly consider waiting until you refresh the hardware at these sites to deploy NAC. If you run into any unknown bugs on that platform they will never be fixed, so this should be considered as a risk.

Also, be aware of these known bugs:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCve01806

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCtt94766

topic Re: ISE 2.6 and EHWIC-D-8ESG-P in Network Access Control

ISE 2.6 and EHWIC-D-8ESG-P

Re: ISE 2.6 and EHWIC-D-8ESG-P