Cisco NAC

[swann]

Hi everyone,

I know it is not a new technology, but can someone point me to the right direction on how to setup Cisco ISE 3.0 (is that the latest) for Cisco Network Access Control (NAC)? I just want to know the high-level steps.

Also, are Windows and Mac the only ones that can be protected as we can install agents on them? What about POS (Point-of-Sale), PDAs? Is there a way to protect them too?

Appreciated if someone can shed some light on this.

Cheers

[balaji.bandi]

if you can not install supplicant, then only Option you have is MAB (Mac based Authentication)

May be security advise, i would advise these device keep them in different VLAN, so it will be protected some kind of security.

[swann]

Thanks for your reply.

Is there any place you can point me to for high-level setup tasks to configure Cisco ISE to perform NAC function?

Cheers

[balaji.bandi · Accepted solution]

Hope below Guide help you (ISE 3.0 is new, but should work as expected)

https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/admin_guide/b_ISE_admin_3_0/b_ISE_admin_30_integration.html

OLD resources :

You might interest in the following sample links on the net:

• MAC Authentication Bypass Deployment Guide - Cisco
• Configuring MAC Authentication Bypass  [Support] - Cisco Systems
• 08 Configuring Wired MAB Authentication - YouTube
• Network Access Service (ISE 2.1 Admin Guide)

[balaji.bandi · Accepted solution]

You might interest in the following sample links on the net:

• MAC Authentication Bypass Deployment Guide - Cisco
• Configuring MAC Authentication Bypass  [Support] - Cisco Systems
• 08 Configuring Wired MAB Authentication - YouTube
• Network Access Service (ISE 2.1 Admin Guide)