WEBVTT

1
00:00.000 --> 00:02.000 align:middle line:84%


2
00:02.000 --> 00:04.190 align:middle line:90%
We are working our way
through the paces with ISE

3
00:04.190 --> 00:05.960 align:middle line:90%
and integration
with the network.

4
00:05.960 --> 00:08.150 align:middle line:90%
We've trained in how to
use Active Directory, which

5
00:08.150 --> 00:09.170 align:middle line:84%
is a good start.

6
00:09.170 --> 00:12.740 align:middle line:90%
Next, let's train ISE on how to
work with and accept requests

7
00:12.740 --> 00:16.343 align:middle line:90%
from a network access device
such as a Cisco switch.

8
00:16.343 --> 00:17.510 align:middle line:84%
And here's the play-by-play.

9
00:17.510 --> 00:19.820 align:middle line:90%
So if you go to the Work
Centers tab, and hover there.

10
00:19.820 --> 00:22.070 align:middle line:84%
And then go to Network Access.

11
00:22.070 --> 00:25.530 align:middle line:90%
Down here we have Network
Resources, and that's one way.

12
00:25.530 --> 00:27.200 align:middle line:84%
Oh!

13
00:27.200 --> 00:30.470 align:middle line:90%
I did not save the changes
from my last settings.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

13
00:27.200 --> 00:30.470 align:middle line:90%
I did not save the changes
from my last settings.

14
00:30.470 --> 00:31.760 align:middle line:84%
Can I cancel?

15
00:31.760 --> 00:33.240 align:middle line:84%
Scroll down and click on Save.

16
00:33.240 --> 00:35.240 align:middle line:90%
You know, when the screen
is a little bit bigger

17
00:35.240 --> 00:36.890 align:middle line:90%
and sometimes that
Save button is missing.

18
00:36.890 --> 00:37.700 align:middle line:84%
Sometimes I forget.

19
00:37.700 --> 00:40.710 align:middle line:90%
So thank you, ISE, for
reminding me to save my changes.

20
00:40.710 --> 00:42.470 align:middle line:84%
All right, so Work Centers.

21
00:42.470 --> 00:46.080 align:middle line:90%
And then from Network Access we
go down to Network Resources,

22
00:46.080 --> 00:47.330 align:middle line:84%
click here.

23
00:47.330 --> 00:48.950 align:middle line:90%
And that will give
us the opportunity

24
00:48.950 --> 00:51.270 align:middle line:84%
to add our network devices.

25
00:51.270 --> 00:53.330 align:middle line:84%
So we click on Network Devices.

26
00:53.330 --> 00:54.620 align:middle line:84%
And then click on Add.

27
00:54.620 --> 00:56.090 align:middle line:84%
It really is that simple.

28
00:56.090 --> 00:58.333 align:middle line:90%
And we'll go ahead and
call this switch 1.

29
00:58.333 --> 00:59.750 align:middle line:90%
And if you have
naming conventions

30
00:59.750 --> 01:01.490 align:middle line:90%
built into your
network gear, that's
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

30
00:59.750 --> 01:01.490 align:middle line:90%
built into your
network gear, that's

31
01:01.490 --> 01:03.770 align:middle line:90%
a great idea to help
remember where it is.

32
01:03.770 --> 01:06.410 align:middle line:90%
And I'm going to go
ahead and specify the IP

33
01:06.410 --> 01:07.490 align:middle line:84%
address for that.

34
01:07.490 --> 01:09.600 align:middle line:90%
We can specify
location information.

35
01:09.600 --> 01:10.350 align:middle line:84%
Oh, you know what?

36
01:10.350 --> 01:12.162 align:middle line:84%
We really can't.

37
01:12.162 --> 01:13.370 align:middle line:84%
Let's go ahead and save this.

38
01:13.370 --> 01:15.078 align:middle line:90%
And I'll show you how
we can tweak these,

39
01:15.078 --> 01:16.550 align:middle line:90%
and why that would
be a good idea.

40
01:16.550 --> 01:19.970 align:middle line:90%
So I've got the IP address of
this network access device.

41
01:19.970 --> 01:23.840 align:middle line:90%
I also want to tell ISE that
we want to play RADIUS--

42
01:23.840 --> 01:26.995 align:middle line:90%
peak RADIUS-- back and forth
between ISE and that device.

43
01:26.995 --> 01:29.120 align:middle line:90%
And to do that, we're going
to put a checkbox here,

44
01:29.120 --> 01:31.540 align:middle line:90%
or checking the checkbox
for RADIUS authentication.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

44
01:29.120 --> 01:31.540 align:middle line:90%
or checking the checkbox
for RADIUS authentication.

45
01:31.540 --> 01:33.082 align:middle line:90%
Now, we're going to
put in the shared

46
01:33.082 --> 01:34.750 align:middle line:84%
secret, which I will put in.

47
01:34.750 --> 01:36.988 align:middle line:90%
We'll configure the same
shared secret on the switch.

48
01:36.988 --> 01:38.530 align:middle line:90%
And then, there's
other options here.

49
01:38.530 --> 01:41.090 align:middle line:90%
But that's the basic
defaults that you need.

50
01:41.090 --> 01:42.830 align:middle line:84%
Now, we'll click on Submit.

51
01:42.830 --> 01:46.070 align:middle line:90%
One of the benefits of
adding additional details

52
01:46.070 --> 01:48.980 align:middle line:90%
to your network access
devices is that you

53
01:48.980 --> 01:50.740 align:middle line:84%
can include it in policy.

54
01:50.740 --> 01:54.860 align:middle line:90%
So if we create some location
objects, like, site 1, site 2.

55
01:54.860 --> 01:56.900 align:middle line:90%
And we create some
device-type objects,

56
01:56.900 --> 01:59.360 align:middle line:90%
like, these are switches,
these are routers.

57
01:59.360 --> 02:01.820 align:middle line:90%
We can use all of
that in our policies.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

57
01:59.360 --> 02:01.820 align:middle line:90%
We can use all of
that in our policies.

58
02:01.820 --> 02:06.410 align:middle line:90%
Then you say if it's a switch
at site 1 on a Thursday,

59
02:06.410 --> 02:09.949 align:middle line:90%
then authenticate, or
then give the access.

60
02:09.949 --> 02:12.260 align:middle line:90%
Let me share with you how we
can add a little more very

61
02:12.260 --> 02:14.720 align:middle line:90%
useful detail to these
network access devices

62
02:14.720 --> 02:15.470 align:middle line:84%
that we're adding.

63
02:15.470 --> 02:16.160 align:middle line:84%
Take a look.

64
02:16.160 --> 02:18.050 align:middle line:84%
It would go something like this.

65
02:18.050 --> 02:20.630 align:middle line:90%
So we have this switch
created, but if we

66
02:20.630 --> 02:22.790 align:middle line:90%
go back to device groups--
take a look at this--

67
02:22.790 --> 02:24.978 align:middle line:90%
these device groups
are what showed up.

68
02:24.978 --> 02:26.520 align:middle line:90%
And there's not very
many by default.

69
02:26.520 --> 02:29.180 align:middle line:90%
So if we wanted to
add site 1 and site 2,

70
02:29.180 --> 02:31.850 align:middle line:90%
we wanted to add a category
for routers and switches,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

70
02:29.180 --> 02:31.850 align:middle line:90%
we wanted to add a category
for routers and switches,

71
02:31.850 --> 02:34.010 align:middle line:90%
we simply use the
Add button, here.

72
02:34.010 --> 02:35.793 align:middle line:84%
And let's create site 1.

73
02:35.793 --> 02:36.710 align:middle line:84%
Now, here's the trick.

74
02:36.710 --> 02:38.720 align:middle line:90%
What we could do
is create site 1.

75
02:38.720 --> 02:39.880 align:middle line:84%
It could be the parent--

76
02:39.880 --> 02:41.690 align:middle line:84%
like, a top-level device.

77
02:41.690 --> 02:46.140 align:middle line:90%
Or you go ahead and
nest it under locations.

78
02:46.140 --> 02:49.520 align:middle line:90%
So if we put site 1 under
locations for all locations,

79
02:49.520 --> 02:50.630 align:middle line:84%
and save.

80
02:50.630 --> 02:51.410 align:middle line:84%
Now, check it out.

81
02:51.410 --> 02:53.300 align:middle line:90%
If we expand all
locations-- so we

82
02:53.300 --> 02:56.510 align:middle line:90%
can create a whole brand
new parent or root,

83
02:56.510 --> 02:57.873 align:middle line:84%
or we can use an existing one.

84
02:57.873 --> 02:59.540 align:middle line:90%
I'm also going to
create one for site 2.

85
02:59.540 --> 03:02.280 align:middle line:90%
Let's do the same
treatment for device types.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

85
02:59.540 --> 03:02.280 align:middle line:90%
Let's do the same
treatment for device types.

86
03:02.280 --> 03:04.890 align:middle line:90%
Right here, we have device
types already pre-built for us.

87
03:04.890 --> 03:06.080 align:middle line:84%
We'll click on Add.

88
03:06.080 --> 03:08.940 align:middle line:90%
And let's type in router,
meaning it's a router,

89
03:08.940 --> 03:10.698 align:middle line:90%
and we'll put
under device types.

90
03:10.698 --> 03:12.740 align:middle line:90%
And I already created a
couple others previously.

91
03:12.740 --> 03:14.810 align:middle line:84%
So router, singular.

92
03:14.810 --> 03:18.170 align:middle line:90%
And let's also create
one for switch.

93
03:18.170 --> 03:19.460 align:middle line:84%
So now, take a look.

94
03:19.460 --> 03:22.567 align:middle line:90%
Under all device types, we
can have classifications.

95
03:22.567 --> 03:24.650 align:middle line:90%
We can assign these to our
network access devices.

96
03:24.650 --> 03:25.535 align:middle line:84%
It's beautiful.

97
03:25.535 --> 03:28.480 align:middle line:90%
So we go back to our network
device, which is a switch.

98
03:28.480 --> 03:29.840 align:middle line:84%
We go back to the properties.

99
03:29.840 --> 03:33.650 align:middle line:90%
Down here under the
location, dropdown, site 1.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

99
03:29.840 --> 03:33.650 align:middle line:90%
Down here under the
location, dropdown, site 1.

100
03:33.650 --> 03:37.290 align:middle line:90%
And device type,
dropdown, it's a switch.

101
03:37.290 --> 03:39.410 align:middle line:90%
It's a great way to
add additional detail

102
03:39.410 --> 03:42.650 align:middle line:90%
into our network access
devices so that if we

103
03:42.650 --> 03:44.210 align:middle line:90%
want to do
manipulation of policy

104
03:44.210 --> 03:46.940 align:middle line:90%
based on where our device
is, or what type of a device

105
03:46.940 --> 03:49.250 align:middle line:90%
it is, then we can use
those objects as part

106
03:49.250 --> 03:50.710 align:middle line:84%
of our policies.

107
03:50.710 --> 03:52.565 align:middle line:90%
All right, if we go
back to network devices,

108
03:52.565 --> 03:54.320 align:middle line:84%
there we have that one switch.

109
03:54.320 --> 03:56.930 align:middle line:90%
And we use a process to add
additional network access

110
03:56.930 --> 03:58.140 align:middle line:84%
devices.

111
03:58.140 --> 04:00.450 align:middle line:90%
So now in this video, we've
walked through setting up
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

111
03:58.140 --> 04:00.450 align:middle line:90%
So now in this video, we've
walked through setting up

112
04:00.450 --> 04:02.270 align:middle line:90%
and network access
device in ISE.

113
04:02.270 --> 04:04.738 align:middle line:90%
Also, using tags
regarding a device group.

114
04:04.738 --> 04:05.780 align:middle line:84%
Now, that's really handy.

115
04:05.780 --> 04:07.190 align:middle line:84%
Like site 1 or site 2.

116
04:07.190 --> 04:09.040 align:middle line:84%
Or am I a router or a switch.

117
04:09.040 --> 04:11.960 align:middle line:90%
Because later in policy,
if we want to or need to,

118
04:11.960 --> 04:13.550 align:middle line:90%
we can make that a
condition regarding

119
04:13.550 --> 04:16.220 align:middle line:90%
authentication or
authorization when

120
04:16.220 --> 04:18.089 align:middle line:84%
we're implementing our policy.

121
04:18.089 --> 04:21.097 align:middle line:90%
And another cool thing is
this, if you didn't initially

122
04:21.097 --> 04:23.180 align:middle line:90%
set up a device group and
set up those attributes,

123
04:23.180 --> 04:26.150 align:middle line:90%
you can go back later and
simply create the device groups,

124
04:26.150 --> 04:28.370 align:middle line:90%
go back to your network
devices, and simply add

125
04:28.370 --> 04:29.480 align:middle line:84%
those attributes.

126
04:29.480 --> 04:31.250 align:middle line:90%
And then you can
use them in policy.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

126
04:29.480 --> 04:31.250 align:middle line:90%
And then you can
use them in policy.

127
04:31.250 --> 04:33.860 align:middle line:90%
And speaking of policy, that's
what our next video is all

128
04:33.860 --> 04:34.360 align:middle line:84%
about.

129
04:34.360 --> 04:37.340 align:middle line:90%
About the logic with
authentication policies

130
04:37.340 --> 04:40.970 align:middle line:90%
and authorization policies,
where you'd go to see them,

131
04:40.970 --> 04:43.550 align:middle line:90%
then we'll work our way
towards creating, modifying,

132
04:43.550 --> 04:45.615 align:middle line:90%
and then verifying
those policies, as well.

133
04:45.615 --> 04:47.240 align:middle line:90%
And that'll continue
in the next video.

134
04:47.240 --> 04:49.730 align:middle line:90%
Meanwhile, I hope this has
been informative for you,

135
04:49.730 --> 04:53.020 align:middle line:90%
and I'd like to thank
you for viewing.