Cisco ISE: 5. Adding NAD to ISE

Technology: Network Security
Area: Access and Identity Management
Vendor: Cisco
Software: 2.1
Platform: ISE Virtual Appliance, ISE Physical Appliance

For ISE 3.0 setup, check ISE 3.0 NAD configuration

When the radius client (switch or wifi controller) wants to talk with radius it needs to be defined as a network access device (NAD) on the radius server (in our case ISE). Otherwise, every authentication try will fail. Before you add NAD to ISE you can define the structure of NAD for better organization. You can define Groups and NAD Locations and Types. These attributes can be used while building Authentication (AuthC) and Authorization (AuthZ) rules. To add a device:

• Define Type e.g. Wireless

• Define Location e.g. GrandmetricLabs

• Define the device itself and add it to previously configured groups