cisco ise 1.3 - how authenticate a nad to a network

[Augustgood]

hi,

can be possible authenticate a nad ( switch , wlc , etc) to a network like an endpoint? who can send to me a config guide or a link that explain the config ? this for limiting rogue device connected to a network.

thanks

[Kanwaljeet Singh]

Hi Nicoles,

NAD is like a switch, wlc, routers and you add them in ISE/ACS and authenticate them using pre-shared key. If that doesn't match, authentication fails. That is the only way i know of.

If you are getting requests from device which are not added in the device groups etc, then you will get a log message. If shared secret is invalid, you will get a log message for that too.

Regards,

Kanwal

Note: Please mark answers if they are helpful.

[Augustgood]

Hi 

The pre-shared key are used for management access to switch/router etc and for authenticate user to network, but i'd like to know if can be possible authenticate the device itself.

Fo example if you connect a device (like switch etc) on a network if there is a pre-shared or not the device can comunicate...

[aukhadiev · Accepted solution]

Hi,

you can use Network Edge Authentication Topology (NEAT):

http://www.cisco.com/c/en/us/support/docs/lan-switching/8021x/116681-config-neat-cise-00.html