ISE

The video walks you through Cisco ISE 1.2 configuration and demonstrates device onboarding as part of Bring Your Own Device (BYOD) concept. We will be exclusively covering wireless access with single SSID using Windows 7, iPhone, and Android as client devices. We will also looks at how users can manage their own devices through the MyDevices portal. This lab partially repeats our ISE 1.1 BYOD mini-series with emphasis on ISE 1.2. We will begin our configuration from scratch so you can observe the entire configuration steps. 

The video looks into Cisco ISE 1.2 wireless 802.1X authentication with FlexConnect AP. We will configure wireless AP and SSID to operate in central switching and local switching and compare authorization capability on ISE between the two modes. Since local switching mode does not support DACL, we will be configuring FlexConnect ACL and FlexConnect group and use dynamic VLAN assignment to place a wireless user on a VLAN with appropriate ACL.

The video looks into Cisco ISE 1.2 wireless 802.1X authentication with FlexConnect AP. We will configure wireless AP and SSID to operate in central switching and local switching and compare authorization capability on ISE between the two modes. Since local switching mode does not support DACL, we will be configuring FlexConnect ACL and FlexConnect group and use dynamic VLAN assignment to place a wireless user on a VLAN with appropriate ACL.

The video demonstrates the use of Endpoint Protection Service (EPS) on Cisco ISE 1.2 to quarantine undesired endpoints. Unlike manually removing an endpoint from the network by shutting down port and the endpoint can potentially be moved to a different port to regain access, although ISE also allow you to exactly this by issuing a port-shutdown CoA, placing host MAC address or IP into EPS quarantine ensures the endpoint remains denied from the network regardless of its point to attachment. A policy can be created to block endpoint traffic by ACL or/and placing them into a unusable VLAN.

The video demonstrates the use of Endpoint Protection Service (EPS) on Cisco ISE 1.2 to quarantine undesired endpoints. Unlike manually removing an endpoint from the network by shutting down port and the endpoint can potentially be moved to a different port to regain access, although ISE also allow you to exactly this by issuing a port-shutdown CoA, placing host MAC address or IP into EPS quarantine ensures the endpoint remains denied from the network regardless of its point to attachment. A policy can be created to block endpoint traffic by ACL or/and placing them into a unusable VLAN.

The video demonstrates the use of a wildcard certificate on Cisco ISE 1.2 to register nodes in a distributed deployment. We will go through CSR generation on ISE, have it signed, and use it to register a secondary Admin/Monitoring/Policy Service node to a primary. You will see how a single certificate can now be used on multiple ISE nodes.

The video brings you up to speed of what's new in Cisco ISE 1.2. We will go through the ISE 1.2 release notes and review each new feature individually and show their corresponding changes on the GUI as applicable. Basic familiarity of Cisco ISE 1.1 is recommended prior to viewing this video. This is an introduction to new features on ISE 1.2 and there will be no configuration in this lab.

The video brings you up to speed of what's new in Cisco ISE 1.2. We will go through the ISE 1.2 release notes and review each new feature individually and show their corresponding changes on the GUI as applicable. Basic familiarity of Cisco ISE 1.1 is recommended prior to viewing this video. This is an introduction to new features on ISE 1.2 and there will be no configuration in this lab.