topic Re: ISE specific interface for Device Admin operation in Network Access Control

ISE specific interface for Device Admin operation

rezaalikhani — Sun, 15 Dec 2024 08:17:22 GMT

Hi all;

As far as I know, ISE by default supports RADIUS-based traffic in all interfaces (interfaces other the Gig 0). I want to know that, is this rule also applies for TACACS traffic?

Thanks

Re: ISE specific interface for Device Admin operation

balaji.bandi — Sun, 15 Dec 2024 09:20:10 GMT

It's the same case with TACACS, too, as far as I know; if you like, you can use a dedicated interface depending on deployment; make sure you have a high availability setup.

https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/install_guide/b_ise_InstallationGuide30/b_ise_InstallationGuide30_chapter_7.html

Re: ISE specific interface for Device Admin operation

Marcelo Morais — Mon, 16 Dec 2024 07:35:26 GMT

Hi @rezaalikhani

ALL Interfaces can be configured with IP Addr.

RADIUS and TACACS+ can be performed on separate Interface, but listen on ANY Interface.

Guest/Sponsor/My Devices/BYOD Portals can be configured and restricted for specific Interfaces.

ISE management is restricted to GigabitEthernet 0.

Hope this helps !!!