ISE and ACI Integration

[chongchu]

Hi All,

With ACI Integration, we probably can manipulate SGTs to EPG mappings, but what are the other integrations that we can do? Information does not seem to be readily documented.

What are our validated/support use cases with ACI and ISE?

Many thanks in advance.

[Aravind Ravichandran · Accepted solution]

Please find the use case & integration in this here.

Once EPG to SGT conversion is done, you can build an SXP connection to Firewall & can do PBR, access list rules based on SGT.

Also, you can achieve identity-based micro-segmentation with this.

-Aravind

[toyip]

The use case URL redirects to the Cisco.com home page. Is it still available? I have a customer that just got started on integrating ISE and ACI.

[Greg Gibbs]

See this recent community post related to ISE-ACI integration limitations and suggestions. The current Policy Plane integration solution is not suitable for most customers due to the limitations of a single L3Out, within a single VRF, within a single tenant.