https://community.cisco.com/t5/network-security/ise-vs-a-ethernet-y-cable-splitter/m-p/4692858#M1093623 <P>In my corporate environment, IT won't give permission for a switch, they wants us to lay more cable, but it's too expensive.&nbsp; Leadership doesn't understand and says just use WiFi.&nbsp; ISE of course prevents using a switch without permission; ISE will detect it and quarantine it.&nbsp; But would 2 computers hooked up to a y splitter cable get quarantined?&nbsp; My understanding is that rogue switches get blocked because they are not configured correctly and are not secure.&nbsp; BUt, a y cable has o such issues?</P> Fri, 23 Sep 2022 15:13:19 GMT mcmanus 2022-09-23T15:13:19Z https://community.cisco.com/t5/network-security/ise-vs-a-ethernet-y-cable-splitter/m-p/4692858#M1093623 <P>In my corporate environment, IT won't give permission for a switch, they wants us to lay more cable, but it's too expensive.&nbsp; Leadership doesn't understand and says just use WiFi.&nbsp; ISE of course prevents using a switch without permission; ISE will detect it and quarantine it.&nbsp; But would 2 computers hooked up to a y splitter cable get quarantined?&nbsp; My understanding is that rogue switches get blocked because they are not configured correctly and are not secure.&nbsp; BUt, a y cable has o such issues?</P> Fri, 23 Sep 2022 15:13:19 GMT https://community.cisco.com/t5/network-security/ise-vs-a-ethernet-y-cable-splitter/m-p/4692858#M1093623 mcmanus 2022-09-23T15:13:19Z https://community.cisco.com/t5/network-security/ise-vs-a-ethernet-y-cable-splitter/m-p/4692921#M1093628 <P>A splitter cable will not allow 3 devices (2 computers and a switch port) to communicate at all, much less with ISE. Switched Ethernet just doesn't work that way.</P> <P>When multiple devices are connected to a switch port (either with a downstream unauthorized hub or a phone with a PC connected, etc.) the switch configured with ISE as the RADIUS server for dot1x authorization control will detect the multiple MAC addresses and behave according to the configured policy (authenticate each separately, authenticate only one data and one voice domain device, block all bu the first connected address, etc.)</P> Fri, 23 Sep 2022 16:35:40 GMT https://community.cisco.com/t5/network-security/ise-vs-a-ethernet-y-cable-splitter/m-p/4692921#M1093628 Marvin Rhoads 2022-09-23T16:35:40Z