Cisco ISE 2.7 or 3.0 - Design validation - use of 4300 or 4400 series routers

[r1127hyduk]

Question for the team - are there any known issues or anomalies between ISE 2.7/3.0 and ISR 4300 and 4400 series routers?  A Cisco compatibility document does not list either router platform within its compatibility tables for some reason.  I look forward to any comments from the forum.

https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/compatibility_doc/b_ise_sdt_30.html#Cisco_Reference.dita_124b1513-a495-42e2-b147-ad6b06fec291

[Rob Ingram]

@r1127hyduk 

I don't believe Cisco tests all hardware models (usually just the latest), but if your network device can issue access control requests using the standard RADIUS and TACACS protocols then ISE can support it.

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/216127-does-ise-support-my-network-access-devic.html

The ISR 4000 series will support RADIUS and TACACS so yes I imagine it should be fine.

[r1127hyduk]

Thanks for the update Rob.  I'm assuming the 4x00 series routers are good with ISE based on code and use cases.

[Rob Ingram]

@r1127hyduk 

Depends what you are using the routers for, if basic AAA then most supported IOS-XE should be ok. If using TrustSec I'd consider using a 17.x code, as it supports some newer TrustSec specific features.