ISE without DNAC

[tedens]

Hi,

I am looking for an overview of ISE functionality in the case a customer has no (or plans for) DNAC.

so what are we missing in a ISE-only deployment (with Cisco Cat9K switches).

Can we still do all the AAA functions, (micro) segmentation, SGT's, assign policies to SGT's etc ?

many thanks !

[Dustin Anderson · Accepted solution]

As far as I know you should be able to do everything without DNAC. We don't do SGTs, but we do AAA, TACACS, dACLs etc with no issues. We just pulled out DNAC due to licensing costs. 

[Milos_Jovanovic]

Hi @tedens,

As @Dustin Anderson said, you can do all of mentioned with pure ISE deployment. DNAC should brign additional automation on top of your existing equipment, but all functionalities are still there.

BR,

Milos

[hslai]

I agree with Milos and Dustin.

https://cs.co/ise-videos has a playlist of Cisco ISE Intro and should get you started and the ISE Webinars playlist gives you deep dive into different topics.