This session is a nice introduction to IBNS 2.0. I was surprised to find the section on autoconf in there - not sure why this is relevant to 802.1X/MAB if ISE is used for profiling. I am confused about why you advocate Device Classifier when the ISE Admin Guide states to disable it with "no maco auto monitor" - This command prevents network access devices from sending two identical RADIUS accounting messages per change. It seems to me that autoconf is something you would use if you did not have a AAA server like ISE. I would have liked to see more information on how best to use the Device Tracking and Device Sensor feature, and less on hackery with EEM. Using DNAC is also becoming very relevant and it would have been nice to see exactly how the templates are built in a non-SDA scenario. A lot of customers still don't use SDA but are starting to adopt DNAC for "automation" - templates are a terrible solution for building anything but it's currently the best we have. I have seen how DNAC works in SDA and it's great - why can't it push 802.1X config to non SDA switches?
This is a well done introduction to IBNS 2 . Thank you Keith.
Thanks Keith, this video has been very useful.
This session is a nice introduction to IBNS 2.0. I was surprised to find the section on autoconf in there - not sure why this is relevant to 802.1X/MAB if ISE is used for profiling. I am confused about why you advocate Device Classifier when the ISE Admin Guide states to disable it with "no maco auto monitor" - This command prevents network access devices from sending two identical RADIUS accounting messages per change. It seems to me that autoconf is something you would use if you did not have a AAA server like ISE. I would have liked to see more information on how best to use the Device Tracking and Device Sensor feature, and less on hackery with EEM. Using DNAC is also becoming very relevant and it would have been nice to see exactly how the templates are built in a non-SDA scenario. A lot of customers still don't use SDA but are starting to adopt DNAC for "automation" - templates are a terrible solution for building anything but it's currently the best we have. I have seen how DNAC works in SDA and it's great - why can't it push 802.1X config to non SDA switches?
😘 𝐩𝐫𝐨𝐦𝐨𝐬𝐦