topic Hello,It could theorically in Network Access Control

ISE web auth for non-cisco switch(D-link 3528)

Hung Tsung Chen — Mon, 11 Mar 2019 05:11:32 GMT

Is it possible to use ISE(inline posture node) to redirect the wired users to ISE guest portal ?

And the wired users will get full network access after they pass the web auth.

Hello,It could theorically

Bastien Migette — Tue, 18 Nov 2014 11:18:59 GMT

Hello,

It could theorically work if the switch is able to send all attributes in accounting packets, such as IP address and mac address in calling station-id. If the attributes are missing or incorrect, the iPEP ISE will never create the session (see show pep table session).

Being that said, that probably never have been tested, so you might want to reconsider your design as there are no guarantee this can ever work.

you can use ISE ln-line

Venkatesh Attuluri — Fri, 21 Nov 2014 13:48:04 GMT

you can use ISE ln-line posture node with 3rd part switches

RADIUS access device must supply the following RADIUS attributes:

Calling-Station-Id (for MAC_ADDRESS)

User-Name

NAS-Port-Type

RADIUS accounting message must have the Framed-IP-Address attribute

VLAN, DACL features can be used but again it depends on switch models let us know specific switch models . Certain advanced use cases, such as those that involve posture assessment, profiling, and web authentication, are not consistently available with non-Cisco devices or may provide limited functionality,