- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-15-2018 11:59 AM
Hello Guys,
I want to use a Radius server for Dynamic vlan assignment for Wired network by mac-addresses.
I am looking for some sort of radius server which is vendor neutral in terms of 802.1x and mac-based authentication. we are using Cisco switches on one site and Aruba on another sites.
Please write licensing cost if you know ?
Thanks
Solved! Go to Solution.
- Labels:
-
Identity Services Engine (ISE)
Accepted Solutions

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-15-2018 12:47 PM
The license answer depends on how you identifying the different assets to put on different VLANs. Dot1x and static whitelisted MAC addresses will consume a Base License. If you are using ISE's profiling feature to dynamically put MAC addresses into endpoint groups and are using those endpoint groups in rules that will consume a Base and a Plus license.
I am not going to get into the pitfalls of doing VLAN moves on wired as they are well documented. Just plan on doing closed mode or using CPL template.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-15-2018 12:47 PM
The license answer depends on how you identifying the different assets to put on different VLANs. Dot1x and static whitelisted MAC addresses will consume a Base License. If you are using ISE's profiling feature to dynamically put MAC addresses into endpoint groups and are using those endpoint groups in rules that will consume a Base and a Plus license.
I am not going to get into the pitfalls of doing VLAN moves on wired as they are well documented. Just plan on doing closed mode or using CPL template.
