資源描述:
《Integration of ISE (Identity Services Engine) with Cisco WLC (Wireless LAN Controller)》由會(huì)員上傳分享,免費(fèi)在線閱讀,更多相關(guān)內(nèi)容在學(xué)術(shù)論文-天天文庫。
1、IntegrationofISE(IdentityServicesEngine)withCiscoWLC(WirelessLANController)?Introductiononpage1?WhatisISEonpage1?KeyfeaturesofISEonpage2?Whathappensbehindtheboxesonpage3?ComponentsUsedonpage5?NetworkDiagramonpage5?Configurationonpage5?Cisco5500WirelessLANControllerConfig
2、urationonpage6?ISEConfigurationonpage8?Limitationsonpage10?ISEisfromNAC-OOB–thisdifferencesareasperISEver1.0onpage11?RelatedInformationonpage11?RelatedLinksonpage13IntroductionThisdocumentprovidesasampleconfigurationforIntegrationofISE(IdentityServicesEngine)withCiscoWir
3、elessLANController.NOTE:-Thisdocumentisaboutposturingtheclientandbasedon7.0.116.0.ThesameinformationisalsomentionedintheVoD.WhatisISECiscoIdentityServicesEngine(ISE)isanextgenerationproductthatprovidesvarioustypesofsolutions/servicesinonebox.Example–ACS,NAC,NACProfiler,N
4、ACGuestPortfoliosandmanymore.Postingsmaycontainunverifieduser-createdcontentandchangefrequently.Thecontentisprovidedas-isandisnotwarrantiedbyCisco.1IntegrationofISE(IdentityServicesEngine)withCiscoWLC(WirelessLANController)KeyfeaturesofISE?AAAprotocols-itusesRADUISProtoc
5、olforAuthentication,AuthorizationandAccounting.ISENACandWLCusesRADUISprotocoltocommunicatewitheachother.?Authenticationprotocols–Itsupportsvarioustypesofauthenticationprotocols.PAP,MS-CHAP,EAP-MD5,PEAP,EAP-FAST,?EAP-TLS.?Accesscontrol–itprovideswiderangeofaccesscontrolme
6、chanismlike-URLRedirect,VlanAssignment,downloadableaccesscontrollistsdACLs),andSGAtagging.?Posture–ISEverifiesendpoint’spostureassessmentviaeitheraNAC-client-Agentorwebagent.Anadmincanconfigurevariouskindsofpostureconditionslike–latestOSpatches,Antivirusetc.-?Profiling–P
7、rofilingisforidentifyingandanalyzingend-pointsinthenetwork,end-pointscanbeanydeviceinthenetworkwhichtrytoaccessnetworklike–iPhone,iPad,laptop,printersetc.ISEcomeswithseveralpre-definedprofilesforend-points.Wecanalsocreateourownandwecandefinespecificauthorizationpolicytot
8、hoseprofile.?Policymodel–policymodeloffersattributesandrulebasedpoliciesforcreatingflexibleandmorespeci