topic Re: How do we check if Cisco ISE configured with RADIUS authentication in Network Access Control

How do we check if Cisco ISE configured with RADIUS authentication ?

Network_Sarovani — Wed, 09 Mar 2022 07:15:12 GMT

Hello Experts ,

How do we check if Cisco ISE configured with RADIUS authentication services or with TACACS ?

Re: How do we check if Cisco ISE configured with RADIUS authentication

Kasun Bandara — Wed, 09 Mar 2022 07:30:54 GMT

Cisco ISE itself a radius server. also can map to external radius server if required. check below link.

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/213239-configure-external-radius-servers-on-ise.html#anc7

you can check policies for radius rules or tacacs rules and identify which services are configured. also use live log for radius and tacacs to identify activities for relevant services

Re: How do we check if Cisco ISE configured with RADIUS authentication

balaji.bandi — Wed, 09 Mar 2022 07:42:20 GMT

ISE is Identity and TACACS/Radius purpose, You can check the end devices configured with ISE IP address:

check policies :

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215525-use-radius-for-device-administration-wit.html

Re: How do we check if Cisco ISE configured with RADIUS authentication

Network_Sarovani — Wed, 09 Mar 2022 09:33:45 GMT

I see the below config on switches..So it means we are using radius ?

aaa new-model
!
!
aaa group server radius ISE
server name ISE1
server name ISE2
ip radius source-interface Vlan201
!
aaa authentication login default group ISE local
aaa authentication dot1x default group ISE
aaa authorization exec default group ISE local
aaa authorization network default group ISE
aaa accounting update newinfo periodic 2880
aaa accounting identity default start-stop group ISE
aaa accounting exec default start-stop group ISE
!
!
!

Re: How do we check if Cisco ISE configured with RADIUS authentication

Rob Ingram — Wed, 09 Mar 2022 10:04:21 GMT

@Network_Sarovani check the ISE Live Logs or Device Admin Logs to determine whether there are RADIUS and/or TACACS sessions.

On the switches you can run "show authentication session" to determine whether there are active sessions.

Re: How do we check if Cisco ISE configured with RADIUS authentication

balaji.bandi — Wed, 09 Mar 2022 12:32:26 GMT

yes correct as per the config - that is global config,. you can also check interface config is the same ?