cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
592
Views
5
Helpful
3
Replies
Highlighted
Enthusiast

802.1x implementation on ISE

Hello,

I have a question. Can I implement a NAC with ISE without configure 802.1x ?.

It's ISE agentless or anyconnect is mandatory?

Thanks.

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
VIP Advisor VIP Advisor
VIP Advisor

Re: 802.1x implementation on ISE

Ok well any solution will be a compromise if you need to support multiple vendors. You can create authorization rules in ISE based on the type of switch the user/computer is connecting from and return the syntax of the ACL specific to that manufacturer to be applied to the user session.

 

Yes, I believe you should be able to apply monitor mode on all 3 manufacturer switches. You should confirm this is HP/Aruba and Juniper forums, as this forum specialises in Cisco solutions.

 

HTH

View solution in original post

3 REPLIES 3
Highlighted
VIP Advisor VIP Advisor
VIP Advisor

Re: 802.1x implementation on ISE

Hi,
Yes you could implement NAC with ISE and not use 802.1x, either using MAB or PassiveID to authenticate the devices. However 802.1x is considered more secure than MAB or PassiveID.

You do not necessarily need AnyConnect, you'd only really use AnyConnect NAM if you want to use EAP-FAST to combine computer and user authentication. If you use MAB/PassiveID then no agent on the client computer is required.

HTH
Highlighted
Enthusiast

Re: 802.1x implementation on ISE

Hello RJI,

I need a NAC solution that works with Cisco, Aruba and Juniper (switches, APs, Routers).

I want implement Monitor Mode/Low-Impact Mode those devices? 

Thanks.

Highlighted
VIP Advisor VIP Advisor
VIP Advisor

Re: 802.1x implementation on ISE

Ok well any solution will be a compromise if you need to support multiple vendors. You can create authorization rules in ISE based on the type of switch the user/computer is connecting from and return the syntax of the ACL specific to that manufacturer to be applied to the user session.

 

Yes, I believe you should be able to apply monitor mode on all 3 manufacturer switches. You should confirm this is HP/Aruba and Juniper forums, as this forum specialises in Cisco solutions.

 

HTH

View solution in original post