Chapter 5. Device Administration Control with ISE
The previous chapters in this book discussed the various methods to control user access to the network with Cisco ISE. Another key function of ISE is the ability to control access to the network device itself for administrative purposes.
This chapter discusses the benefits of using a centralized access control for device administration and the use of Remote Authentication Dial-In User Service (RADIUS) and Terminal Access Controller Access-Control System Plus (TACACS+) protocols to do that. It also discusses how to configure ISE and different Cisco network devices to enforce granular device administration control.
The Case for Centralized AAA
One of the first steps for securing a network should ...
Get Integrated Security Technologies and Solutions - Volume II: Cisco Security Solutions for Network Access Control, Segmentation, Context Sharing, Secure Connectivity and Virtualization, First Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
