Main Nav

Is anyone yet using Cisco ISE? To what degree of feature set? Thanks, Lee Lee H. Badman Network Architect/Wireless TME ITS, Syracuse University 315.443.3003 ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

Comments

We are running Cisco ISE for wireless only, it was implemented over the summer. We are currently at version 1.1.0.665 with an upgrade to 1.1.2 planned for early next week.

We are using it to support both a WPA2/PEAP SSID, as well as a mac authenticated "gaming" SSID. We are not using the supplicant, endpoint compliance, SGA or guest pieces.

If you want anything more specific feel free to send some questions my way.


Anyone using the client onboarding feature in ISE and if so what is your experience?

 

 

Cheers

Anders Nilsson

Umeå University

Sweden

 

Från: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] För Joe Roth
Skickat: den 7 november 2012 03:19
Till: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Ämne: Re: [WIRELESS-LAN] Cisco ISE?

 

We are running Cisco ISE for wireless only, it was implemented over the summer. We are currently at version 1.1.0.665 with an upgrade to 1.1.2 planned for early next week.

 

We are using it to support both a WPA2/PEAP SSID, as well as a mac authenticated "gaming" SSID. We are not using the supplicant, endpoint compliance, SGA or guest pieces.

 

If you want anything more specific feel free to send some questions my way.

 

Message from schwabca@muohio.edu

How are you implementing mac authentication?

 

Charlie

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@listserv.educause.edu] On Behalf Of Joe Roth
Sent: Tuesday, November 06, 2012 9:19 PM
To: WIRELESS-LAN@listserv.educause.edu
Subject: Re: [WIRELESS-LAN] Cisco ISE?

 

We are running Cisco ISE for wireless only, it was implemented over the summer. We are currently at version 1.1.0.665 with an upgrade to 1.1.2 planned for early next week.

 

We are using it to support both a WPA2/PEAP SSID, as well as a mac authenticated "gaming" SSID. We are not using the supplicant, endpoint compliance, SGA or guest pieces.

 

If you want anything more specific feel free to send some questions my way.

 

I’m curious. We’re using ISE for WPA2/PEAP as well, but our GoDaddy cert keeps giving cert errors on pretty much anything. What cert are you using? Or is this normal?

 

Thanks,

Eric

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Schwab, Charles A.
Sent: Friday, November 09, 2012 12:24 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Cisco ISE?

 

How are you implementing mac authentication?

 

Charlie

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@listserv.educause.edu] On Behalf Of Joe Roth
Sent: Tuesday, November 06, 2012 9:19 PM
To: WIRELESS-LAN@listserv.educause.edu
Subject: Re: [WIRELESS-LAN] Cisco ISE?

 

We are running Cisco ISE for wireless only, it was implemented over the summer. We are currently at version 1.1.0.665 with an upgrade to 1.1.2 planned for early next week.

 

We are using it to support both a WPA2/PEAP SSID, as well as a mac authenticated "gaming" SSID. We are not using the supplicant, endpoint compliance, SGA or guest pieces.

 

If you want anything more specific feel free to send some questions my way.

 

Dear Eric and Lee

 

May I know what kind of license did you buy for your ISE (Base, advanced 5-year, or wireless 5-year)? Do you separate different roles (staff, student, guest) of the wireless clients using ISE? We have around 50,000 staff and students, and the maximum simultaneous user is around 9,000 now. If we want to use ISE, what kind of license should we buy? I noticed that the wireless license is quite expensive and has to be renewed every 5 years!

 

Thank you and have a nice day.

 

Yours,

Linchuan Yang (Antony)

Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664

 

 

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Eric T. Barnett
Sent: November-13-12 11:13 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Cisco ISE?

 

I’m curious. We’re using ISE for WPA2/PEAP as well, but our GoDaddy cert keeps giving cert errors on pretty much anything. What cert are you using? Or is this normal?

 

Thanks,

Eric

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Schwab, Charles A.
Sent: Friday, November 09, 2012 12:24 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Cisco ISE?

 

How are you implementing mac authentication?

 

Charlie

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@listserv.educause.edu] On Behalf Of Joe Roth
Sent: Tuesday, November 06, 2012 9:19 PM
To: WIRELESS-LAN@listserv.educause.edu
Subject: Re: [WIRELESS-LAN] Cisco ISE?

 

We are running Cisco ISE for wireless only, it was implemented over the summer. We are currently at version 1.1.0.665 with an upgrade to 1.1.2 planned for early next week.

 

We are using it to support both a WPA2/PEAP SSID, as well as a mac authenticated "gaming" SSID. We are not using the supplicant, endpoint compliance, SGA or guest pieces.

 

If you want anything more specific feel free to send some questions my way.

 

We are not ISE users at this point in Syracuse- I too was inquiring of others, not speaking firsthand.

 

-Lee

 

 

 

From: Linchuan Yang [mailto:linchuan.yang@concordia.ca]
Sent: Wednesday, November 14, 2012 1:14 PM
To: The EDUCAUSE Wireless Issues Constituent Group Listserv
Cc: Lee H Badman
Subject: RE: [WIRELESS-LAN] Cisco ISE?

 

Dear Eric and Lee

 

May I know what kind of license did you buy for your ISE (Base, advanced 5-year, or wireless 5-year)? Do you separate different roles (staff, student, guest) of the wireless clients using ISE? We have around 50,000 staff and students, and the maximum simultaneous user is around 9,000 now. If we want to use ISE, what kind of license should we buy? I noticed that the wireless license is quite expensive and has to be renewed every 5 years!

 

Thank you and have a nice day.

 

Yours,

Linchuan Yang (Antony)

Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664

 

 

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Eric T. Barnett
Sent: November-13-12 11:13 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Cisco ISE?

 

I’m curious. We’re using ISE for WPA2/PEAP as well, but our GoDaddy cert keeps giving cert errors on pretty much anything. What cert are you using? Or is this normal?

 

Thanks,

Eric

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Schwab, Charles A.
Sent: Friday, November 09, 2012 12:24 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Cisco ISE?

 

How are you implementing mac authentication?

 

Charlie

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@listserv.educause.edu] On Behalf Of Joe Roth
Sent: Tuesday, November 06, 2012 9:19 PM
To: WIRELESS-LAN@listserv.educause.edu
Subject: Re: [WIRELESS-LAN] Cisco ISE?

 

We are running Cisco ISE for wireless only, it was implemented over the summer. We are currently at version 1.1.0.665 with an upgrade to 1.1.2 planned for early next week.

 

We are using it to support both a WPA2/PEAP SSID, as well as a mac authenticated "gaming" SSID. We are not using the supplicant, endpoint compliance, SGA or guest pieces.

 

If you want anything more specific feel free to send some questions my way.