In an ISE install... Can I enable AAA and RADIUS on a L2 Switch?

[RSundstrom]

Hello,

I am going through the steps to enable wired authentication on an ISE installation. I work for a large organization and would like to enable wired auth on just one 48 port switch in order to work out the bugs before implementing wired auth network wide.

When I was at a Global Knowledge ISE seminar we programmed L3 switches for AAA and RADIUS. Can this also be done on an L2 switch? The switch in question is a Cisco Catalyst 3560.

Our L3 switches are Cisco model 4506. If I have to enable AAA and RADIUS on them I would be rolling out ISE for 250 users.

I would prefer to start with one L2 switch with only 24 users.

Any ideas?

Bob

[Christopher Bell]

Yes, AAA should not require L3 support.

http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.2_55_se/configuration/guide/sw8021x.html




Sent from Cisco Technical Support Android App

[muhammk2]

Hello,

Yes you can also use Cisco Catalyst 3560 to configure AAA and RADIUS. You can configure MAB, DOt1X and CWA.

Please refer to below link which might help you.

http://www.cisco.com/en/US/docs/switches/lan/catalyst3750x_3560x/software/release/12.2_55_se/configuration/guide/sw8021x.html

[msonnie]

Yes, you can surely enable AAA and RADIUS on a L2 Switch and for your convenience, you may refer to the following link as well.

http://www.cisco.com/en/US/products/ps11640/products_configuration_example09186a0080ba6514.shtml

It would assist you with your query.
HTH.