Inline Posture between Cisco ISE and Wireless LAN Controller

Unanswered Question
Feb 15th, 2012

Hi,

I was looking into Cisco ISE solution for deploying NAC.

I have a question about the network topology.

In  the user guide documents of cisco ISE, it is written that for Wireless  LAN Controllers (WLC) and VPN devices, an additional server, Inline Posture, is needed.

However, in the following integration document, there is not an inline posture between WLC and Cisco ISE server.

https://supportforums.cisco.com/docs/DOC-18121

I  want to know if Inline Posture is a requirement, if not a  requirement, what are the benefits of having it between Cisco ISE Server  and WLC.

Thanks & Regards

Sinan

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
jilahbg Sat, 02/18/2012 - 11:51

When doing posture assesment, ISE Needs to send information ack to the network device to change parameters, for example vlan change. In switches this is done with CoA, an extention to the radius protocol.

WLC doesnt support CoA as of v7.1.

Sent from Cisco Technical Support iPad App

jrabinow Sun, 02/19/2012 - 14:22

Later versions of WLC do support COA. There are versions currently shipping that do support COA

Venkatesh Attuluri Mon, 09/23/2013 - 05:45

An Inline Posture node is a gatekeeper that enforces access policies and handles change of authorization (CoA) requests.

following link "Cisco Identity Services Engine Network Component Compatibility, Release 1.2" Lists NAD that support "Session CoA"

http://www.cisco.com/en/US/docs/security/ise/1.2/compatibility/ise_sdt.html

Actions

Login or Register to take actions

This Discussion

Posted February 15, 2012 at 1:24 AM
Stats:
Replies:4 Overall Rating:
Views:1696 Votes:0
Shares:0

Related Content

 

Discussions Leaderboard

Rank Username Points
1
Tarik Admani
2,908
2
Premdeep Banga
1,083
3
Neno Spasov
1,082
4
darpotter
484
5
Amjad Abdullah
429
Rank Username Points
Neno Spasov
32
Martin Wisely
15
cehill
10
Patrick Meyer
10
bikespace
10