topic Re: posturing with Statically configured Endpoint in Network Access Control

posturing with Statically configured Endpoint

sandesh-dhuri — Mon, 31 Mar 2025 06:40:49 GMT

Want to know if we can posture endpoint to which we have assigned IP statically in Compliant VLAN range. If yes then how, we are using C1000 switch as per my knowledge we cannot use DACLs here.

Re: posturing with Statically configured Endpoint

ahollifield — Mon, 31 Mar 2025 14:20:38 GMT

Why do you want to statically assign an IP?

Catalyst 1000 Switches do support dACL. Catalyst 1200 and 1300 do not.

Re: posturing with Statically configured Endpoint

sandesh-dhuri — Mon, 31 Mar 2025 14:25:52 GMT

We are going to deploy ISE for one of our customer, where they are having around 20 branches and around 1200 endpoint which have statically assigned ip already as there are most of branches with 10 users, and Customer don't want to change it

Re: posturing with Statically configured Endpoint

ahollifield — Mon, 31 Mar 2025 14:43:33 GMT

You can do this. Static vs dynamic doesn't really matter for Posture flow. Just make sure the ACL correct (local ACL or DACL and redirect ACL).