EMAIL SUPPORT

dclessons@dclessons.com

LOCATION

AF

Customize ISE Profiling Configuration

Customize ISE Profiling Configuration

Customize ISE Profiling Configuration

Topology: 

Below is the topology provided to configure in lab

Task: 

Perform below task as per above topology.

  • Configure Profiler Service to use profiling data to make policy determination.
  • Examine Profiled Endpoint data.
  • Create Logical Profile and use this as identity condition for authorization policy.
  • Create Custom Profile policy based on observed Endpoint Data.

Solution:

Navigate to Admin PC and Access to ISE, Navigate to Context Visibility | End Points | Click on to the vWLC and go to other attributes.

Verify the Endpoint Source: SNMP Query Probe. 

Profile Guest PC:

Login to Guest PC | Navigate to Network and Sharing Center | Click Change Adapter Setting | Enable the Wired NIC, Wait for some time and Check Details

Access ISE GUI and Navigate to Context Visibility | Endpoints and Refresh the Button, Here you will see Guest PC MAC address

Create Logical Profile:

Navigate to Work Center | Profiler | Profiling Policies | Select the Logical Profile | Click ADD

 

Configure the Logical Profile as per below snapshots | Click Submit.

Create New Authorization Policy for Logical Profile.

Navigate to Policy | Policy Set | Wireless Access Policy Set | Expend the Authorization policy and configure the policy as per below figure. | Click Use once you configure Authorization Policy.


Comment

    You are will be the first.

LEAVE A COMMENT

Please login here to comment.