2960-CX versus 3560-CX for home user application with ISE

[jobraun]

Hi,

I'm working with a customer that uses the ASA5505 for home users but now wants to also use ISE.  ASA5505 doesn't support ISE.

They require:

ISE compatibility for Change of Authorization replicating the connected office experience:

• MAC Authentication Bypass for phones, thin-client, or printers
• Customer’s machines with NAC agents are able to fully authenticate
• Non-customer machines are blocked entirely

We’re thinking of positioning a 2960CX compact switch behind the ASA5505 but wanted to check if anyone had a reason not to do this.  Or if there was any reason to go with a 3560CX over the 2960CX?

Thanks,

Joe

[kthiruve · Accepted solution]

HI Joseph,

Please see the ISE compatibility guide that is the source of truth of network devices compatible with ISE.

These are network devices that are validated with ISE and recommended for deployment.

Cisco Identity Services Engine Network Component Compatibility, Release 2.1 - Cisco

Thanks

Krishnan