topic ACS to ISE config issues in Network Access Control

ACS to ISE config issues

Si — Mon, 11 Mar 2019 04:27:50 GMT

Hi,
Im trying to migrate VPNS from ACS to ISE but i cannot quite get used to the ISE.

Below is a picture of my Authentication rule id like replicating on ISE but so far i have had no joy. Any points would be greatly received.

If the network source IP is trusted Rule 1 is hit and ISS is just use AD

If the network source IP is untrusted Rule 2 is hit and ISS is just use OTP Then AD

Im not 100% on the authorisation aspect either.

I think im want something along the lines of Ad:Group/x/x/x/x and TunnelGroup xxx = Permit/Apply ACL else Deny

I can pass authentiation from the ASA to ISE, one thing i have noticed in the aaa report, in the AV pairs the tunnel group name is not listed.

Many thanks in advance

ACS to ISE config issues

blenka — Wed, 26 Feb 2014 18:29:49 GMT

please find the link below may help you.

http://www.cisco.com/en/US/docs/security/ise/1.2/user_guide/ise_guest_pol.html#wp1554378

ACS to ISE config issues

Si — Thu, 27 Feb 2014 08:11:46 GMT

Hi Basant,

I dont think thats quite what im looking for. I need to work out how to add new rules for IPsec VPN tunnels and SSL VPN

ACS to ISE config issues

Muhammad Munir — Thu, 27 Feb 2014 14:49:52 GMT

FYI

Cisco Secure ACS and Cisco ISE exist on different hardware platforms and have different operating systems, databases, and information models. Therefore, you cannot perform a standard upgrade from Cisco Secure ACS to Cisco ISE. Instead, the Cisco Secure ACS to Cisco ISE Migration Tool reads data from Cisco Secure ACS and creates corresponding data in Cisco ISE.

For migrating the policies, and all other information, please visit the following link particularly the chapter 3,4,5:

http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/migration_guide/ise_migration_guide/ise_mig_preface.html