topic Re: Intigrating Fotinet switch with cisco ise in Network Access Control

Intigrating Fotinet switch with cisco ise

rameshkumarnakka — Tue, 11 Jun 2024 11:34:04 GMT

Hey Team,

can any one share the switch configuration for fortinet switch to integrate with cisco ISE for Basic AAA.

Re: Intigrating Fotinet switch with cisco ise

ahollifield — Tue, 11 Jun 2024 15:52:32 GMT

cs.co/ise-interop

How is the FortiSwitch managed? FortiGate? Standalone? FortiSwitch Manager? FortiLAN Cloud?

Re: Intigrating Fotinet switch with cisco ise

rameshkumarnakka — Tue, 11 Jun 2024 17:20:54 GMT

one is standalone and one is fortigate firewall

Re: Intigrating Fotinet switch with cisco ise

ahollifield — Tue, 11 Jun 2024 17:41:55 GMT

What exactly are your use-cases? 802.1X? MAB? ACLs? Profiling? Wired Guest? Something else? Note that in both cases the best way to configure these is through the GUI. Its very straight forward on both the FortiGate managed mode and standalone GUI.

Re: Intigrating Fotinet switch with cisco ise

rameshkumarnakka — Tue, 11 Jun 2024 18:06:19 GMT

uses cases are like - 802.1x as well MAB , yeah we had confiigured that and Fortiswitch and ise able to talk for. authentication request after that, when were entering credentials into ethernet settings on windows devices it showing verifying credentials for long time and showing like not connected,action needed

Re: Intigrating Fotinet switch with cisco ise

ahollifield — Tue, 11 Jun 2024 18:16:55 GMT

And what did the ISE logs show? What did the FortiSwitch and FortiGate logs show? Why are you manually configuring the supplicants and not using a GPO or MDM? Why are username/password being used and not certificates?