CISCO ISE POLICY SETS HELP

[prathamesh002]

Hi Friends,

I am trying to replicate attached policy sets in ise 3.1.

Not able to do it as mentioned in post, may be due to UI difference but I want to achieve those by applying authentication policy and policy sets.

can any one help me in this as I could not do nested conditions here.

Actual post: ISE - Dot1x Policy Configuration - Cisco Community.

#dot1x #AAA #ISE  @ciscoCommunity  @dot1x  @katmcnam #NAC

[Marcelo Morais]

Hi @prathamesh002 ,

 please take a look at Work Centers > Posture > Policy Elements > Conditions > Dictionary Compound.

Hope this helps !!!

[Charlie Moreton · Accepted solution]

The new Policy Engine (new as of ISE 2.3) does not allow for multiple Allowed Protocols per Policy Set.  The Allowed Protocols are defined PER Policy Set.  To allow MAB and 802.1x in a Policy Set, you must define such in the Allowed Protocols.  

From there, you can define the Identity Source used in your Authentication Rules (Unless using an External RADIUS Server Sequence).  Because of this, you will not see the nested Authentication Policy as shown in @katmcnam's post (she used 2.2 there, I believe).  

I gave a webinar on this topic and you can see it here Building ISE RADIUS Policy Sets .

To view more about RADIUS Server Sequences and how to set them up (and build policies for them), check out this article Configuring eduroam on Cisco Identity Services Engine (ISE)