Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Cisco ISE Vpn client authentication

Hi dears,

i want vpn cleint authenticate from ISE server. In ISE server external identity source is Active directory. I configurate vpn client in ASA.

I read and understand that i must configurate Inline Posture node in ISE.

I confuse something.

1. Must i need a license for inline posture?

2. how is it work?

3. have the other deployment for vpn client authenticate from ISE?

Thanks.

3 REPLIES
New Member

Cisco ISE Vpn client authentication

IPN is a physical ISE device.  It does not work in a VM. 

Licenses are centrally managed by the Administration node. Inline Posture and Policy Service nodes do not require separate licenses. If you have two Administration nodes deployed in a high-availability pair, you can obtain a license based on the hardware IDs of both the primary and secondary Administration nodes. After you obtain the license, add it only to the primary Administration node. The license gets replicated to the secondary Administration node.


http://www.cisco.com/en/US/docs/security/ise/1.2/installation_guide/ise_deploy.html#wp1151546

Regards,

Brandon

New Member

Cisco ISE Vpn client authentication

New Member

Cisco ISE Vpn client authentication

Thank you very much to reply me.

I have one question. The Cisco ISE physically connect to Core SW(Cisco catalyst 6513-Ein vss).

All access switches connected to core sw. I want to wired and wireless users authenticated form ISE server with 802.1x authentication protocols.

My users and access pint connect to access switch.

I must confiure 802.1x  in access switch. Do i need do any configuration  802.1x in CORE sw?

Thanks.

851
Views
0
Helpful
3
Replies