The Configuring Cisco ISE Essentials for SD-Access (ISESDA) v1.0 course shows you how to deploy the Cisco® Identity Services Engine (ISE) to support the Software-Defined Access (SD-Access) solution within your enterprise networks. You will gain an understanding of how Cisco ISE is utlitized by the SD-Access solution to provide security policies across the organization. You will learn Cisco ISE fundamentals and get hands-on practice configuring ISE, policies, AAA client configuration, VPN access, integration, wireless guest access, and more.

Associated Certification: None

Associated Exam: None

Course Objectives

After taking this course, you should be able to:

• Describe Cisco ISE policies and authentication and authorization process
• Understand different AAA protocols
• Understand how Cisco ISE fits into Cisco Digital Network Architecture (Cisco DNA) Center architecture
• Provide configuration examples of Cisco ISE and TrustSec solutions
• Describe Cisco ISE integration with Cisco DNA Center and policy enforcement using security groups
• Provide configuration examples for wired, wireless, and VPN network access
• Understand how inline tagging and SGT Exchange Protocol (SXP) works

Target Audience

• System engineers
• Network engineers
• Technical architects
• Technical support engineers
• Cisco integrators and partners

Course Prerequisites

To fully benefit from this course, you should have the following knowledge and skills:

• Understanding of network routing and switching principles equivalent to the Cisco CCNA® certification level

Course Outline

Cisco ISE Overview

• Examining the Cisco Identity Services Engine
• Examining AAA protocols
• Examining Authentication
• Integrating ISE with Active Directory
• Examining Authorization
• Exploring AAA Client Configuration

Cisco ISE Guest Access

• Examining Guest Portal Types
• Examining Guest User Types
• Configuring Cisco ISE AAA Policy

Cisco ISE and SD-Access

• Exploring Cisco SD-Access
• Examining Cisco ISE for SD-Access
• Examining SXP