Cisco ISE 3.0 and 4510R+E with SUP7-E

girish_gavandi · ‎05-03-2022

Hello,

We are in the process of choosing the right ISE software version that is compatible/supported for ISE wired 802.1x deployment for our NAD in the LAN.

Below are the NAD we have ,

Model	Software Version
WS-C4510R+E (SUP7-E)	15.2(2)E4
WS-C3750X-48PF-S	15.2(2)E4
2X C9300-48U	16.9.3
WS-C3850-48U-S	03.06.05E
WS-C3750E-24PD-SF	15.2(2)E4
WS-C3560E-48PD-SF	15.0(2)SE11
IE-4000-4T4P4G-E	15.2(4)EA5
WS-C3650-48PD	16.9.4

We have below Cisco ISE appliances available,

4 x SNS-3395-K9
4 x SNS-3355-K9

Will there be any issue (802.1x related feature not available, redirect issues etc.) while configuring wired 802.1x (posturing and profiling) on older NAD hardware and software with new ISE 3.0? In the ISE 3.0 compatibility guide shows no validated support for 4500 with SUP7-E.

The last validated version for the following devices is Cisco ISE 2.7:

Catalyst 4500-X
Catalyst 4500 Supervisor 8-E
Catalyst 3560-G
Catalyst 3650
Catalyst 3850
Catalyst 2960-S
Catalyst 2960-XR

Any help would be much appreciated.

Regards,

Girish

Rob Ingram · ‎05-03-2022

@girish_gavandi just because the 4500 Sup7E is not listed it does not mean it will not work, it's just appears not to have been explicted tested/validated on the newer ISE version. If the device supports RADIUS/TACACS it will work with ISE. https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/216127-does-ise-support-my-network-access-devic.html

Are you sure you meant SNS-3355-K9 and SNS-3395-K9? The 3300 series hardware is long EOL and would not support 3.0. Only 3500 and 3600 hardware will support ISE 3.0

girish_gavandi · ‎05-03-2022

Hi Rob,

The ISE server hardware is,

4 x SNS-3695-K9
4 x SNS-3655-K9

Typing mistake!

I looked at this document,

https://www.cisco.com/c/en/us/td/docs/security/ise/nad_capabilities/nad_capabilities_with_ise.html

Generic document, gives comprehensive list of NADs which are supported with ISE along with features. ISE version tested against is not mentioned. Does it mean the IOS versions listed in the document will work with ISE 3.0?

Regards,

Girish

ahollifield · ‎05-03-2022

https://cs.co/ise-my-nads