cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

6886
Views
0
Helpful
11
Replies
CODNetadmin
Beginner

SSID+PSK with ISE

Hi!

I do have to migrate some of our SSID into 1 single SSID. To give you brief background about the setup:

1. We currently have 5 ssid(ex ss1,ss2,ss3,ss4,ss5) different vlans for each. all clients that are connecting to the said ssid cannot support dot1.x and they are currently using PSK for security.

2. We will need to migrate those 5 ssid into 1 single ssid ( ex.newssid), use dynamic vlans and integrate it with cisco ISE.

3. since those devices doesn't support the 802.1x, is it possible to use PSK for the authc and integrate it with ISE with dynamic filtering and MAC Add filtering?

Thanks!

11 REPLIES 11
Angel Castillo
Beginner

You can use MAB with Endpoint Groups, for example: the devices that connected to SSID1 input in Endpoint Group 01 and you can configure a policy authorization with this group on the condition and the dynamic VLAN in result

mile.ljepojevic
Beginner

Hi,

you can use one PSK for newssid (on 8.3+ code only), have it configured on all wireless endpoints and then use ISE authorization