Cisco Cisco Identity Services Engine 1.3 Guide D’Information

For third-party VPN concentrators to integrate with Cisco ISE and Inline Posture nodes, the following 
authentication, authorization, and accounting (AAA) attributes must be included in RADIUS 
communication:

Calling-Station-Id (for MAC_ADDRESS)

USER_NAME

NAS_PORT_TYPE

Also, for VPN devices, the RADIUS accounting message must have the framed-ip-address attribute set 
to the VPN client’s IP address pool.

Refer to

 for more information.

Meraki MX 
Platforms

Latest Version

Latest Version

1.

Recommended OS is the version tested for compatibility and stability.

2.

Cisco routers such as ISR 88x, 89x Series do not support CWA, therefore, an IPN has to be deployed for posture.

3.

For a complete list of Cisco TrustSec feature support, see 

4.

Minimum OS is the version in which the features got introduced.

5.

Cisco Wireless LAN Controllers (WLCs) and Wireless Service Modules (WiSMs) do not support downloadable ACLs (dACLs), but 
support named ACLs. Autonomous AP deployments do not support the requirements for Inline Posture Node as they do not send 
Framed-IP-Address. Profiling services are supported for 802.1X-authenticated WLANs starting from WLC release 7.0.116.0 and for 
MAB-authenticated WLANs starting from WLC 7.2.110.0. FlexConnect, previously known as Hybrid Remote Edge Access Point 
(HREAP) mode, is supported with central authentication configuration deployment starting from WLC 7.2.110.0. For additional details 
regarding FlexConnect support, refer to the release notes for the applicable wireless controller platform.

1, 2, 3

Microsoft Windows Active Directory 2003

—

Microsoft Windows Active Directory 2003 R2

—

Microsoft Windows Active Directory 2008

—

Microsoft Windows Active Directory 2008 R2

—

Microsoft Windows Active Directory 2012

—

Microsoft Windows Active Directory 2012 R2

4

—