资源描述:
《Integration of ISE (Identity Services Engine) with Cisco WLC (Wireless LAN Controller)》由会员上传分享,免费在线阅读,更多相关内容在学术论文-天天文库。
1、IntegrationofISE(IdentityServicesEngine)withCiscoWLC(WirelessLANController)•Introductiononpage1•WhatisISEonpage1•KeyfeaturesofISEonpage2•Whathappensbehindtheboxesonpage3•ComponentsUsedonpage5•NetworkDiagramonpage5•Configurationonpage5•Cisco5500WirelessLANControllerConfig
2、urationonpage6•ISEConfigurationonpage8•Limitationsonpage10•ISEisfromNAC-OOB–thisdifferencesareasperISEver1.0onpage11•RelatedInformationonpage11•RelatedLinksonpage13IntroductionThisdocumentprovidesasampleconfigurationforIntegrationofISE(IdentityServicesEngine)withCiscoWir
3、elessLANController.NOTE:-Thisdocumentisaboutposturingtheclientandbasedon7.0.116.0.ThesameinformationisalsomentionedintheVoD.WhatisISECiscoIdentityServicesEngine(ISE)isanextgenerationproductthatprovidesvarioustypesofsolutions/servicesinonebox.Example–ACS,NAC,NACProfiler,N
4、ACGuestPortfoliosandmanymore.Postingsmaycontainunverifieduser-createdcontentandchangefrequently.Thecontentisprovidedas-isandisnotwarrantiedbyCisco.1IntegrationofISE(IdentityServicesEngine)withCiscoWLC(WirelessLANController)KeyfeaturesofISE•AAAprotocols-itusesRADUISProtoc
5、olforAuthentication,AuthorizationandAccounting.ISENACandWLCusesRADUISprotocoltocommunicatewitheachother.•Authenticationprotocols–Itsupportsvarioustypesofauthenticationprotocols.PAP,MS-CHAP,EAP-MD5,PEAP,EAP-FAST, EAP-TLS.•Accesscontrol–itprovideswiderangeofaccesscontrolme
6、chanismlike-URLRedirect,VlanAssignment,downloadableaccesscontrollistsdACLs),andSGAtagging.•Posture–ISEverifiesendpoint’spostureassessmentviaeitheraNAC-client-Agentorwebagent.Anadmincanconfigurevariouskindsofpostureconditionslike–latestOSpatches,Antivirusetc.-•Profiling–P
7、rofilingisforidentifyingandanalyzingend-pointsinthenetwork,end-pointscanbeanydeviceinthenetworkwhichtrytoaccessnetworklike–iPhone,iPad,laptop,printersetc.ISEcomeswithseveralpre-definedprofilesforend-points.Wecanalsocreateourownandwecandefinespecificauthorizationpolicytot
8、hoseprofile.•Policymodel–policymodeloffersattributesandrulebasedpoliciesforcreatingflexibleandmorespeci