topic Re: Policy creation in Network Access Control

Policy creation

sujanyakj — Fri, 13 May 2022 03:39:53 GMT

Where exactly we nees to configure the policy in ISE as we are having two options.

1.Policy -> Policy sets

2.Work center - Device admin policy sets

For Authorization policy, i can see the result profile only if i configure the policy in policy sets.

But I will get the Default device admin server sequence only in the device admin policy sets.

Re: Policy creation

Arne Bier — Fri, 13 May 2022 03:52:01 GMT

Hi @sujanyakj

Device Admin is the term ISE uses for TACACS+ .

This confusing could be avoided if the ISE BU simply made another menu item called "Device Admin" or even better, call it by its real name "TACACS+" - instead of hiding this in the Work Center

The Policy Set menu is the RADIUS Policy Set

Re: Policy creation

sujanyakj — Fri, 13 May 2022 04:18:44 GMT

Thank you. This is really helpfull.

We need to write our radius policies in policy sets and tacacs policies over device admin.I hope this is the currect understanding.

Re: Policy creation

Arne Bier — Fri, 13 May 2022 04:46:26 GMT

Yes. That’s exactly right.