Configuring Cisco ISE for 802.1X¶

Policy Sets, Authentication Policies, and Authorization Policies¶

Policy Sets¶

Contain authentication and authorization policies
If-then statements

Policy Set Logic¶

Authorization policy rules are only applied if the device matches the policy set
Evaluated in a top down fashion
Use specific policy sets
- Prevents large, confusing rule-sets

ISE Identity Sources & Active Directory Integration¶

![configuring cisco ise for 802.1x](_images/configuring-cisco-ise-for-802.1x-1.png)

Joining ISE to AD

Adding Network Access Devices To ISE¶

![configuring aaa on cisco ios device for use with cisco ise](../network-security-with-cisco-ios/_images/configuring-aaa-on-cisco-ios-device-for-use-with-cisco-ise-2.png)

Define a network device

Creating Authentication Policies In ISE¶

![configuring aaa on cisco ios device for use with cisco ise](../network-security-with-cisco-ios/_images/configuring-aaa-on-cisco-ios-device-for-use-with-cisco-ise-7.png)

Configure Device Admin Policy Sets

Configuring dACLs, Authorization Profiles, and Authorization Policies¶

![configuring cisco ise for 802.1x](_images/configuring-cisco-ise-for-802.1x-2.png)

dACL

![configuring aaa on an ftd appliance for use with cisco ise](../network-security-with-cisco-firepower/_images/configuring-aaa-on-an-ftd-appliance-for-use-with-cisco-ise-1.png)

Authorisation Policy