ISE & RADIUS VLAN Assignment

[zekebashi]

Hello, 

See attached diag for clarification! 

I am working on implementing 802.1X wired using ISE RADIUS. We have ISE sitting behind a distribution switch(Dist_SW_02). This switch is connected to another distribution switch(Dist_SW_01) via L3. Dist_SW_01 is connected to an access-layer switch via L2/Trunk.

My question is, if we implement RADIUS VLAN-Assignment, will it work since there is an L3 connection between the two distribution switches? 

Thanks, 

~zK 

[Francesco Molino · Accepted solution]

Hi 

It doesn't matter that ISE is far from your access switch (NAD) through L3 interfaces. 

Your ISE will push the vlan assignment to the authenticator and this switch needs to have this vlan on its database. 

Hope this is clear and answers your question. 

Thanks 

PS: Please don't forget to rate and mark as correct answer if this answered your question

[zekebashi]

Thank you, Francesco! 

That's very helpful!! 

Best, ~zK 

[Francesco Molino]

you're welcome!