Clarifications on ISE Hardware (SNS-3415)

[fatalXerror]

Hi Experts,

Good Day!

I just want to have some clarifications if what I did in my installation it correct.

Basically, my I connected 3 cables in my SNS3415 for my ISE and below is the arrangement of the cables

• 1 cable is connected to the port dedicated for the CIMC
• 1 cable is connected to the port dedicated for the ISE MGMT
• 1 cable is connected to the port for the DATA traffic

My question is, is it correct that I allocated 1 dedicated port for my DATA where the RADIUS traffic from user to the server passes through? Could it work if I configure WEB authentication in ISE?

Thank you.

niks

[Charlie Moreton]

Yes.  In the configuration of the portal for Web Authentication, you can choose the interface that is allowed to respond to the requests.  You can also disallow interfaces from responding.

Go to Administration > Device Portal Management > Client Provisioning

Choose your portal or create a new one.  Allow or disallow interfaces from this page and Save.

Of course, you can do this for any portal that is used (BYOD, MDM, etc).

Please Rate Helpful posts and mark this question as answered if, in fact, this does answer your question.  Otherwise, feel free to post follow-up questions.

Charles Moreton

[fatalXerror]

Hi Charles,Thanks for the reply but i think ur ISE is the latest one. Ho about in ISE 1.2 do you think I will encounter a problem regarding my setup?Thanks

[Charlie Moreton]

Nikko,

For ISE 1.2 and 1.2.1, Go to Administration > Web Portal Management > Settings

On the left Menu, under General, select Ports.  Here is where you select the interface on which the portals respond.

Remember to Save.

Please Rate Helpful posts and mark this question as answered if, in fact, this does answer your question.  Otherwise, feel free to post follow-up questions.

Charles Moreton

[fatalXerror]

Hi Charles,

Good Day!

Thanks for this great help.

niks