topic Re: Planning NAC on Edge Switch in Network Access Control

Planning NAC on Edge Switch

craiglebutt — Mon, 06 Jul 2020 08:46:32 GMT

I've been tasked to look at NAC for a large customer. Currently running 600 edge switch stacks over multiple sites, each switch stack is split in to a /25.

I have been playing around with a config before lock down, monitoring on a lab switch on site, plugging in different types of equipment.

I've created different Endpoint Groups for different types of equipment, I'm just wondering if there is a better way?

Currently running 2.2.

Also need to look at scaling up the current nodes, as was built on VM using 1.2 spec.

cheers

Re: Planning NAC on Edge Switch

hslai — Wed, 08 Jul 2020 01:46:46 GMT

You have a good start. Please review the following info:

Re: Planning NAC on Edge Switch

hslai — Wed, 08 Jul 2020 01:54:27 GMT

Cisco Identity Services Engine Software Version 2.2/2.2.1 Product Bulletin

is showing that ISE 2.2 has reached the end of software maintenance. Please plan an upgrade to later ISE releases at the earliest.