switch configuration with ISE

[m-martynowski]

                   I have an ISE implementation going on and need a switch configuration that can fail open if the ISE (Radius) is unavailable.  I have some facilities on the WAN must continue to operate if the WAN service fails.  They will not have a local ISE policy server at the location, all authentication will occur over the WAN.  I think the authentication commands can handle this, just looking for a sample configuration if someone has done this.

[mmangat]

Hello,

Please have a look at the following Cisco doc for Switch Configuration Required to Support Cisco ISE Functions.

http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_sw_cnfg.pdf

You can also watch a couple of videos on you tube.

www.youtube.com/watch?v=MVTjRMOs6aQ

www.youtube.com/watch?v=iBDWs21yVeE

[Eduardo Aliaga]

If you're using multi-auth, then you need this commands

interface Giga x/x/x

authentication host-mode multi-auth

authentication event server dead action reinitialize vlan

authentication event server dead action authorize voice

If you're using multi-domain then you need this commands.

interface Giga x/x/x

authentication host-mode multi-domain

authentication event server dead action authorize vlan

authentication event server dead action authorize voice

Please rate if this helps