topic Re: Service Selection Rules in ISE in Network Access Control

Service Selection Rules in ISE

fuhrersk8 — Mon, 25 Oct 2021 18:22:48 GMT

Hello Guys;

How does the ISE selects the appropriate policy rule set for TACACS or RADIUS respectively?

In ACS was via the Service Selection Policy.

Thanks for your support.

Regards,

Re: Service Selection Rules in ISE

Marcelo Morais — Mon, 25 Oct 2021 20:31:40 GMT

Hi @fuhrersk8 ,

please take a look at the following locations:

at Work Center > Device Administration > Device Admin Policy Sets

at Administration > Policy > Policy Set

Hope this helps !!!

Re: Service Selection Rules in ISE

fuhrersk8 — Mon, 25 Oct 2021 20:54:39 GMT

Thanks Marcelo;

But how ISE determines to either use the Device Admin Policy Set or the Network Access Policy set?

Thanks for your support.

Regards,

Re: Service Selection Rules in ISE

Greg Gibbs — Mon, 25 Oct 2021 22:28:47 GMT

The Device Admin Policy Sets and related policy elements are used when TACACS+ requests are received. All RADIUS requests will use the Network Access Policy Sets and related policy elements.

Re: Service Selection Rules in ISE

fuhrersk8 — Mon, 25 Oct 2021 23:17:02 GMT

Thanks Greg;

Understood.

But it is not explicitly configured as in the ACS Service Selection Rules set? Or it is just a “default” behavior of the ISE?

Re: Service Selection Rules in ISE

Greg Gibbs — Tue, 26 Oct 2021 21:47:36 GMT

No configuration is needed. It is the default (and only available) behaviour of ISE.