cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

CISCO SWITCHES FOR SMALL and MEDIUM BUSINESS

Introducing the next generation of Cisco Small and Medium Business Switches. Cisco is refreshing its SMB Switch portfolio. Click here  to learn more.


1476
Views
0
Helpful
4
Replies
Highlighted

SG300 VLAN ISE

Hello,

customer is using lots of 2960-Switches and plans to implement ISE for dynamic VLAN-Assignment. Should be no problem.

For lots of small offices he wants to purchase SG300 Switches. I recommended Cisco Compact Switches, but they are too expensive.

So the question is: Is it possible to configure the SG300 Switches to communicate with ISE to do allow dynamic VLAN-Assignemt?

Any response will be helpful.

 

regards

Hubert

Everyone's tags (1)
1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Beginner

Hi Hubert,ISE can work in any

Hi Hubert,

ISE can work in any platform especially with the Cisco SG300. By the way, are you a Cisco partner or reseller? For further assistance you can email me at (bsiapco@cisco.com)

Happy to Serve!

Barry

View solution in original post

4 REPLIES 4
Highlighted
Beginner

Hi Hubert,ISE can work in any

Hi Hubert,

ISE can work in any platform especially with the Cisco SG300. By the way, are you a Cisco partner or reseller? For further assistance you can email me at (bsiapco@cisco.com)

Happy to Serve!

Barry

View solution in original post

Highlighted
Cisco Employee

Hi Hubert,From my experience

Hi Hubert,

From my experience it works with freeRadius very well however please note that Small Business switches supports only MD5 hash thus is very important Radius server has this authentication enabled as well.

 

Regards,

Aleksandra

Highlighted

Thank you all for your

Thank you all for your valuable information.

I will check with the admin guide if all the functionality our customer needs is possible.

regards

Hubert

Highlighted
Cisco Employee

Hubert,Barry is absolutely

Hubert,

Barry is absolutely correct. From the switch side, it is setting radius config in the switch to the ip for the ISE and supplying the key, 802.1x setup and ports will be next. Please refer to the sg300 admin guide. pg 391 and 392 specifically for radius-assigned-vlans. Please review Chapter 19 in total. It will inform you as to certain configuration parameters that will and will not work. For the ISE, it can be a location based rule or an attribute for particular users.