radius

The video takes you through an upgrade procedure from Cisco ISE 1.1 to 1.2. We will go over some upgrade considerations and pre-requisites and also make sure you are aware of any caveats. Our lab starts with a functioning ISE 1.1 setup, and we will make comparison to the system after being upgraded to ISE 1.2. Although this lab video is for a standalone system, a lot of our discussions and demonstration here also apply to a distributed deployment.

The video takes you through an upgrade procedure from Cisco ISE 1.1 to 1.2. We will go over some upgrade considerations and pre-requisites and also make sure you are aware of any caveats. Our lab starts with a functioning ISE 1.1 setup, and we will make comparison to the system after being upgraded to ISE 1.2. Although this lab video is for a standalone system, a lot of our discussions and demonstration here also apply to a distributed deployment.

The video walks you through an installation of Cisco Identity Services Engine (ISE) 1.2 on VMware. We will start off with a discussion of deployment sizing strategies on how to pick your appliances and size your VM. We will then guide you step-by-step through the installation process. At the end of this lab, you should have a working ISE server that you can use for future labs. No configuration, other than the setup process, is performed in this video. The video assumes that you have basic working knowledge of VMware ESXi.

The video walks you through an installation of Cisco Identity Services Engine (ISE) 1.2 on VMware. We will start off with a discussion of deployment sizing strategies on how to pick your appliances and size your VM. We will then guide you step-by-step through the installation process. At the end of this lab, you should have a working ISE server that you can use for future labs. No configuration, other than the setup process, is performed in this video. The video assumes that you have basic working knowledge of VMware ESXi.

The video demonstrates User Custom Attribute and Active Directory Attribute features on Cisco ACS 5.4. We will leverage these two features to enforce per-user VPN access as well as static IP assignment. Please note that this lab is built on top of configuration on the previous lab video (SEC0096).

The video walks you through configuration of VPN RADIUS authentication on Cisco ACS 5.4 with AnyConnect Client SSL VPN. We will try to solve the problem of users having to select a VPN group at login by dynamically assigning them to a group-policy via Class RADIUS attribute. We will also attempt to enforce per-user ACL via the Downloadable ACL on the ACS.

The video shows you how to configure wireless 802.1X on Cisco ACS 5.4 using PEAP and EAP-TLS. We will perform both machine and user authentications, and enforce successful machine authentication using Machine Access Restriction (MAR). We will introduces MAR Cache distribution, which is a feature introduced in ACS 5.4. For authentication, we will attempt both using AD login credential (PEAP) and client-based certificate (EAP-TLS).

Part 1 of the video focuses on configuration on the ACS.