04-29-2015 07:36 AM - edited 03-10-2019 10:41 PM
Hello,
Has anybody had any success with using a Cisco 2811 router with an Identity Service Engine application config?
I understand the 2800 series routers are not compatible with ISE but I have quite a number of them to work with and am hoping somebody has found a workaround for this.
Ideas?
Thanks,
05-04-2015 12:24 AM
What exactly are you trying to accomplish? Are you just trying to use ISE to provide AAA services for admins to login and be authorized to run commands on your 2800?
Thank you for rating helpful posts!
05-04-2015 10:40 AM
I have many 2811 routers with switch modules mounted in them. I am trying to use Cisco ISE to authenticate users with workstations wired to the switchports. Cisco TAC has told me that they have not verified that it will work this way. Because of this they are listing the 2811 as "not compatible" with ISE. I am hoping to find someone that already has either confirmed or denied that the 2811 with switch module will work with ISE.
05-04-2015 10:45 PM
Ah, so you are trying to run dot1x on a switch module on your ISR G1. Unfortunately, that hardware would not be supported. For a list of compatible hardware check out the ISE Compatibility Guide:
http://www.cisco.com/c/en/us/td/docs/security/ise/1-3/compatibility/ise_sdt.html
Thank you for rating helpful posts!
06-15-2015 04:05 AM
And what if we only try to perform device administration (login)? Is it supported? And do we need a specific IOS version? Thanks in advance.
Best regards,
Carlos Morais
06-15-2015 05:40 AM
ISE is perfectly capable of acting as a AAA RADIUS server for your routers. Any IOS version that supports RADIUS (which goes back to the 1990s at least) will work for that.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide