10-30-2017 08:34 PM
We are looking at deploying Cisco ISE 2.3 but in the compatibility matrix for ISE2.3 , I haven't found a reference of HP MSM 720 and MSM 760 Wireless Controllers .
Can someone please advice if ISE2.3 is supported on these WLC's running version 6.6.7.0 ? or what's the recommended version we should be running on these WLC's ?
Solved! Go to Solution.
10-31-2017 02:03 AM
Although this model was not specifically tested, it should be able to integrate with ISE for all basic RADIUS use cases including 802.1X and MAC auth. We have listed additional switches/controllers tested with ISE here: ISE Third-Party NAD Profiles and Configs
Typically the challenge is determining the specific parameters used to indicate auth method. If code similar to one tested above then likely existing NAD profile in ISE or directly importable from Community page can be used without modification. You may want to start with HP830 config.
More advanced features like Posture and Profiling should work provided RADIUS or SNMP-based CoA is supported. Some features like CWA, BYOD, or MDM will require URL redirection support to fully operate. We did add ability to perform redirection for the switch in ISE 2.1, but not tested with wireless. Most wireless controllers I have support basic portal redirection and CoA.
We cannot test every vendor combination of hardware/software but hopefully those that have been tested can serve as template. Also, we do not retroactively test with newer versions. Assumption is that newer releases of ISE will continue to operate the same or better. There may also be features (like Posture without redirection in ISE 2.2/AC4.4) which may be used to further enhance the integration, but is not explicitly called out in Community page (or Compatibility section of ISE documentation)
Craig
10-31-2017 02:03 AM
Although this model was not specifically tested, it should be able to integrate with ISE for all basic RADIUS use cases including 802.1X and MAC auth. We have listed additional switches/controllers tested with ISE here: ISE Third-Party NAD Profiles and Configs
Typically the challenge is determining the specific parameters used to indicate auth method. If code similar to one tested above then likely existing NAD profile in ISE or directly importable from Community page can be used without modification. You may want to start with HP830 config.
More advanced features like Posture and Profiling should work provided RADIUS or SNMP-based CoA is supported. Some features like CWA, BYOD, or MDM will require URL redirection support to fully operate. We did add ability to perform redirection for the switch in ISE 2.1, but not tested with wireless. Most wireless controllers I have support basic portal redirection and CoA.
We cannot test every vendor combination of hardware/software but hopefully those that have been tested can serve as template. Also, we do not retroactively test with newer versions. Assumption is that newer releases of ISE will continue to operate the same or better. There may also be features (like Posture without redirection in ISE 2.2/AC4.4) which may be used to further enhance the integration, but is not explicitly called out in Community page (or Compatibility section of ISE documentation)
Craig
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide