Port-based authentication/vlan autoconfigure

[JESSICA Walsh]

We have a group of people who need for the ports to autoconfigure to the correct vlan when various entities attach. I believe you can do this with 802.1.x. My question is, can you do it on only some switch ports and not others or is it the whole switch or none of the switch? And is this something ISE could do?

[jan.nielsen]

It's possible with ISE, the assignment of a VLAN is not dependant on the port configuration, so you could use the same basic config for alle ports that have the port start in one vlan, and then change for some users/devices, and stay in the same vlan for everyone else. The decision be taken by the authorization rules in ISE.