topic Cisco Server requirement for ISE Lab in Network Access Control

Cisco Server requirement for ISE Lab

Naive — Thu, 25 May 2023 19:33:53 GMT

Hello Team,

I am very much intersted to do ISE lab at home, where I can create small setup which includes wired and wireless authentication. So maybe I need virtual instance of ISE and a switch, wlc controller and a Access point..

First Is it possible i create a virtual setup of these devices.. or I need to buy some physical devices..

2nd what kind of server i should purchase. Any specific model and configuration..and I belive i can connect that server with my laptop and through eve-ng or any other simulator can do the lab.

I tried to search on internet but not getting satisfactory response..

Re: Cisco Server requirement for ISE Lab

Rob Ingram — Thu, 25 May 2023 19:42:22 GMT

@Naive you can create a lab based the hardware listed (a switch, WLC and AP), the WLC can be virtual. I am not sure there is a virtual switch software that adequately supports 802.1X/MAB.

The OVA file of ISE can be downloaded for free, you just need to login with your CCO account. Install the image on Vmware and get 90 days evaluation. https://software.cisco.com/download/home/283801620/type/283802505/release/3.1.0

As far as server hardware requirements I don't think the CPU, memory nor HDD will suffice on a laptop. You can generally purchase oldish enterprise servers with SAS drives with a couple of CPUs quite cheap.

Check out the Evaluation requirements in this guide - https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/install_guide/b_ise_InstallationGuide31/b_ise_InstallationGuide31_chapter_2.html

Re: Cisco Server requirement for ISE Lab

Karsten Iwen — Thu, 25 May 2023 20:11:16 GMT

A lab ISE runs fine with four cores and 16 GB of RAM. The 9800-CL also only has low requirements. Then you need an AP and a switch in hardware. A used AP 1800 and a Catalyst 2960cx would be good lab devices.

Re: Cisco Server requirement for ISE Lab

Marvin Rhoads — Sun, 28 May 2023 10:50:46 GMT

My lab hardware is close to what @Karsten Iwen mentioned. I bought my server new as I consider it an ongoing investment in my career progression and expertise. Even if you buy used, I recommend paying close attention to having enough RAM and possibly adding in an NVMe SSD if possible. Mine is a SuperMicro like this one: https://tinkertry.com/my-tinkertry-d-xeon-d-bundle-2-supermicro-superserver-bundle-2-of-joy . I put in 128 GB of RAM and a couple of Samsung EVO NVMe SSDs (1 TB + 2 TB). It runs ESXI 8 (with a nested ESXi 7 hypervisor for backwards compatibility with some VMs). With that setup, I can run ISE 3.2, Firewall Management Center, multiple ASAv and FTDv, virtual WLC, and a couple of Windows VMs (server and workstation) all at once. I can fire up EVE-NG as needed but seldom use it since I don't do much routing lab work.

Re: Cisco Server requirement for ISE Lab

thomas — Tue, 13 Jun 2023 23:29:58 GMT

You may see the ISE platform requirements in the ISE Installation Guides or the ISE Performance and Scale guide. Use the smallest size for your lab.

ISE works with any network device that can do RADIUS. Get what you can afford that still supports RADIUS but depending on your goals, you may want to buy something with the equivalent capabilities you are testing for your production deployment.

See https://cs.co/ise-guides for integration docs.