Planning NAC on Edge Switch

[craiglebutt]

Hi

I've been tasked to look at NAC for a large customer.  Currently running 600 edge switch stacks over multiple sites, each switch stack is split in to a /25.

I have been playing around with a config before lock down, monitoring on a lab switch on site, plugging in different types of equipment.

I've created different Endpoint Groups for different types of equipment, I'm just wondering if there is a better way?

Currently running 2.2.

Also need to look at scaling up the current nodes, as was built on VM using 1.2 spec.

cheers

[hslai · Accepted solution]

You have a good start. Please review the following info:

• ISE Planning & Pre-Deployment Checklists
• http://cs.co/ise-cx

[hslai]

Cisco Identity Services Engine Software Version 2.2/2.2.1 Product Bulletin  

is showing that ISE 2.2 has reached the end of software maintenance. Please plan an upgrade to later ISE releases at the earliest.