Войти
  • 9761Просмотров
  • 3 года назадОпубликованоCisco ISE - Identity Services Engine

Securing Cisco Catalyst Wireless with ISE using mPSK / iPSK / 802.1X

Chapters: 00:00 Intro and Agenda 01:38 ISE RADIUS & TACACS Compatibility 01:56 Methods for Securing Catalyst Wireless 03:12 Wireless Pre-Shared Keys Scenario 03:35 Demo Configuration Review 03:58 VLANs & SVIs 04:29 WLANs: guest, iot, corp 05:21 guest WLAN Config 05:57 iot WLAN Config with Pre-Shared Key 06:50 AAA RADIUS Config 09:08 AAA Advanced Config: Interim Updates, Called-Station-ID 12:04 Wireless Access Policies 14:49 Tags (default-policy-tag) 16:38 AP Name & Configuration 18:34 Demo: Guest SSID Test with iPad 19:43 Demo: iot Pre-Shared Key 20:48 ISE LiveLogs & Guest WiFi Policy 23:32 IOT WiFi Policy 25:34 Called-Station-ID in LiveLog Details 27:23 mPSK_IOT Authorization Profile 29:31 Demo: IOT Pre-Shared Key with Raspberry Pi Endpoint Profile 33:11 mPSK Overview 35:48 Demo: mPSK Configuration 40:04 mPSK_RaspberryPi Authorization Profile 42:47 iPSK Overview 43:58 iPSK Manager (Open Source project, not TAC supported!) 45:28 Demo: Endpoint Custom Attributes 47:18 Demo: iPSK with Endpoint Attributes 48:23 iPSK_EndpointAttribute Authorization Profile using Endpoint Attributes 50:26 Overview 53:08 Supplicant Configuration 54:15 Demo: corp WLAN for Employees with a Certificate 57:35 Demo: Meraki System Manager Profiles to provision certificates 59:41 dCloud ISE 3.1 Sandbox (Cisco Sellers only) Resources: - Configure Catalyst 9800 WLC iPSK with Cisco ISE : - Cisco ISE & WLC - WPA2-PSK WLAN: Per-Device Passphrase (IPSK) : - Guidelines for Cisco Wireless Software Release Product Bulletin (AireOS EOL) : - ISE and Catalyst 9800 Series Integration Guide : - ISE Guest Access Prescriptive Deployment Guide :