Is it good to use ISE for Device Management

[pemasirid]

Hi,

Just want to know while ISE is implementing for all Wired/Wireless user authentication and authorization, can we use the same ISE box for AAA client management (Device Authentication and Authorization), we know it work as RADIUS and cant get accounting fuction.

Thanks in advance.

[Tarik Admani]

If you are looking for basic authentication i have deployed it for plenty of my clients. However the centralizing of command authorization is a challenge with radius.


Sent from Cisco Technical Support Android App

[pemasirid]

Hello Tariq,

Many thanks for your reply on this. I also have doubts on how to configure command authorization and privilege level etc. Since even there is no Cisco recommendation or any document covering this part using ISE, it is better to recommend client to avoid using ISE for device Admin/Authorization.

Once again thanks for your input.

[Venkatesh Attuluri]

check

https://supportforums.cisco.com/message/3745516#3745516

https://supportforums.cisco.com/message/3876986#3876986

https://supportforums.cisco.com/message/4038956#4038956

[pemasirid]

Hi Venkat,

Many thanks for your information, these will difenitely help for building auth profile and privilege level. I can only give a try once we start with testing of this configuration.

thanks a lot.