Wired 802.1X authentication and Vlan Assignment(Cisco ISE & SWITCH)

[Laxmi Khajjannavar]

Hi,

We are planing to implement Wired dot1X in our network.

How can we start with the implementation  & any best practices.  Also switch end recommend configurations.

Any suggestion/ help!!

Thank you.....Laxmi!!

[Francesco Molino]

Hi 

The minding to deploy dot1x smoothly with less impact is following a 3 step deployment: Monitor, low impact and close mode.

This allows you to create rules and validate that users are authenticated well. If, for some reasons, users aren't able to authenticate they won't be impacted in monitor mode and few impacted in low impact mode. When everything is configured will then you can move forward with close mode. 

I can share some configuration but it won't help if you don't get how it works. 

I would suggest to read the 2 links below and you should be able to begin your config. Then if you have issues I can help. 

http://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/Aug2014/CVD-CampusDot1XDesignGuide-AUG14.pdf

http://www.networkworld.com/article/2233208/cisco-subnet/7-essential-new-features-make-deploying-wired-802-1x-easier-on-a-cisco-infrastructure.html

Thanks 

PS: Please don't forget to rate and mark as correct answer if this answered your question