Cisco Cisco Identity Services Engine Software Manual Técnico

Contributed by Vivek Santuka, Cisco TAC Engineer.
Jan 15, 2013

Introduction
 Prerequisites
      Requirements
      Components Used
      Conventions
 Discovery Process
 Verify
 Related Information

This document describes how the Cisco Network Admission Control (NAC) Agent discovers a Cisco Identity
Services Engine (ISE) policy node, as well as the configuration required to ensure successful communication
between the NAC agent and the ISE.

Cisco recommends that you meet these requirements:

Client machine must be provisioned with NAC agent.

• 

ISE must be configured correctly for client provisioning flow.

• 

AAA client (switch or WLC) must be configured with proper redirect ACL. It is critical that this ACL
redirects any communication on port 80 and does not redirect communication on port 8905.

• 

Client machine must be able to resolve the ISE hostname.

• 

The information in this document is based on these software and hardware versions:

Cisco Network Admission Control (NAC) Agent 4.9.x

• 

Cisco Identity Services Engine (ISE) 1.1.x

• 

The information in this document was created from the devices in a specific lab environment. All of the
devices used in this document started with a cleared (default) configuration. If your network is live, make sure
that you understand the potential impact of any command.

Refer to Cisco Technical Tips Conventions for more information on document conventions.