topic Hello Minakshi-You can in Network Access Control

ACL--- ISE

minkumar — Mon, 11 Mar 2019 04:56:15 GMT

Hi Team!!

in ISE , Can a static acl be applied dynamically to a switch interface, i.e. if a port on a switch, which is allocated to a printer, becomes active but no certificate is received on the ISE, then the ISE will push an ACL to the switch port to only allow printer traffic. This could get around MAC authentication bypass possibly.

Cheers!!

Minakshi

Hello Minakshi-You can

nspasov — Wed, 13 Aug 2014 21:24:39 GMT

Hello Minakshi-

You can definitely accomplish this by:

1. Configure the switch to support both mab and dot1x

2. Configure ISE for mab and dot1x

3. Configure a printer specific "dACL" in ISE

4. Configure a printer specific "Authorization Profile" in ISE and attach the dACL created in step #3 to it

5. Test 🙂

Thank you for rating helpful posts!

Hey Neno!!! I need to do an

minkumar — Thu, 14 Aug 2014 12:53:08 GMT

Hey Neno!!!

I need to do an import n export for Mac addresses in Bulk for MAB in ISE. Could you kindly attach the template of .CSV file which can be uploaded in ISE for MAB.

Thanks

Minakshi

I don't have the template

nspasov — Thu, 14 Aug 2014 23:10:20 GMT

I don't have the template handy with me but you can actually download it directly from ISE 🙂

Thank you for rating helpful posts!

Hi neno, Since I cannot

minkumar — Mon, 18 Aug 2014 02:28:12 GMT

Hi neno,

Since I cannot download it. if possible could you please attach the template. There will be an ISE device available in your LAB. Can you download it from there and attach it,

Regards

Minakshi

Please find attached. Thank

nspasov — Thu, 21 Aug 2014 00:03:36 GMT

Please find attached.

Thank you for rating helpful posts!

Thanks Neno!!! Appreciate it

minkumar — Thu, 21 Aug 2014 09:20:56 GMT

Thanks Neno!!!

Appreciate it>>>

Hi Neno, Thsi is not the

minkumar — Thu, 21 Aug 2014 09:59:39 GMT

Hi Neno,

Thsi is not the correct template. I want to upload MAC address information in ISE for MAB.

Are you sure this is the correct template which you have sent?

Minakshi

Sorry about that, it was

nspasov — Thu, 21 Aug 2014 13:21:42 GMT

Sorry about that, it was indeed the incorrect template. Here is the correct one.

Thank you for rating helpful posts!

Hi Neno, I dont seem to

minkumar — Fri, 22 Aug 2014 06:08:47 GMT

Hi Neno,

I dont seem to find the attachement.

Minakshi

That is strange because I can

nspasov — Fri, 22 Aug 2014 19:46:33 GMT

That is strange because I can see it...let's try for the third time 🙂