CCNP Security Identity Management SISE 300-715 Official Cert Guide

Chapter 24

Device Administration AAA with ISE

This chapter covers the following topics:

• Configure personas

• Describe deployment options

• Describe identity store options

• Configure network access devices

• Configure policies including authentication and authorization profiles

• Compare AAA protocols

• Configure TACACS+ device administration and command authorization

Cisco ISE is a policy server. It exists to provide authentication, authorization, and accounting (AAA) for purposes of access control.

With ISE Version 1.0, there was only one AAA protocol that could be used with ISE: RADIUS. As discussed in Chapter 1, “Fundamentals of AAA,” RADIUS is the primary AAA protocol used for controlling network access. ISE Version 1.x was designed as a next-generation ...