Manualsbrain.com
  1. Manuales
  2. Marcas
  3. Cisco
  4. Cisco Identity Services Engine 2.1
  5. Guía De Información

Cisco Cisco Identity Services Engine 2.1 Guía De Información

Descargar
Página de 20
 
6
Cisco Identity Services Engine Network Component Compatibility, Release 2.1
 
  Supported AAA Attributes for Third-Party VPN Concentrators
Supported AAA Attributes for Third-Party VPN Concentrators
For third-party VPN concentrators to integrate with Cisco ISE, the following authentication, 
authorization, and accounting (AAA) attributes must be included in RADIUS communication:
•
Calling-Station-Id (for MAC_ADDRESS)
•
USER_NAME
•
NAS_PORT_TYPE
Also, for VPN devices, the RADIUS accounting message must have the framed-ip-address attribute set 
to the VPN client’s IP address pool.
Supported External Identity Sources
Refer to
 for more information.
Cisco Routers
ISR 88x, 89x Series IOS 15.3.2T(ED)
√ 
!
X
!
X
X
√ 
IOS 15.2(2)T
!
!
X
!
X
X
√ 
ISR 19x, 29x, 39x 
Series
IOS 15.3.2T(ED)
√ 
!
X
!
X
X
√ 
IOS 15.2(2)T
√ 
!
X
!
X
X
√ 
SGR 2010
IOS 15.3.2T(ED)
√ 
!
X
!
X
X
√ 
IOS 15.3.2T(ED)
√ 
!
X
!
X
X
√ 
4451-X
SM-X L2/L3 
Ethermodule
IOS-XE 3.11
√ 
√ 
√ 
√ 
√ 
√ 
√ 
IOS-XE 3.11
√ 
√ 
√ 
√ 
√ 
√ 
√ 
Cisco Remote Access
ASA 5500, ASA 
5500-X (Remote 
Access Only)
ASA 9.2.1
NA
NA
√ 
NA
√ 
X
√ 
ASA 9.1.5
NA
NA
X
NA
X
X
X
Meraki MX 
Platforms
Latest Version
√ 
!
X
!
X
X
X
Latest Version
√ 
!
X
!
X
X
X
1.
Recommended OS is the version tested for compatibility and stability.
2.
For a complete list of Cisco TrustSec feature support, see 
3.
Minimum OS is the version in which the features got introduced.
4.
Cisco Wireless LAN Controllers (WLCs) and Wireless Service Modules (WiSMs) do not support downloadable ACLs (dACLs), but support named 
ACLs. Autonomous AP deployments do not support endpoint posturing. Profiling services are supported for 802.1X-authenticated WLANs starting from 
WLC release 7.0.116.0 and for MAB-authenticated WLANs starting from WLC 7.2.110.0. FlexConnect, previously known as Hybrid Remote Edge 
Access Point (HREAP) mode, is supported with central authentication configuration deployment starting from WLC 7.2.110.0. For additional details 
regarding FlexConnect support, refer to the release notes for the applicable wireless controller platform.
Table 1
Supported Network Access Devices (continued)
Device
Recommended OS
1
AAA
Profiling
BYOD
Guest
Posture
MDM
TrustSec 
2
Minimum OS 
3