Securing Cisco Catalyst Wireless with ISE using mPSK / iPSK / 802.1X

Chapters:
00:00 Intro and Agenda
01:38 ISE RADIUS & TACACS Compatibility
01:56 Methods for Securing Catalyst Wireless
03:12 Wireless Pre-Shared Keys Scenario
03:35 Demo Configuration Review
03:58 VLANs & SVIs
04:29 WLANs: guest, iot, corp
05:21 guest WLAN Config
05:57 iot WLAN Config with Pre-Shared Key
06:50 AAA RADIUS Config
09:08 AAA Advanced Config: Interim Updates, Called-Station-ID
12:04 Wireless Access Policies
14:49 Tags (default-policy-tag)
16:38 AP Name & Configuration
18:34 Demo: Guest SSID Test with iPad
19:43 Demo: iot Pre-Shared Key
20:48 ISE LiveLogs & Guest WiFi Policy
23:32 IOT WiFi Policy
25:34 Called-Station-ID in LiveLog Details
27:23 mPSK_IOT Authorization Profile
29:31 Demo: IOT Pre-Shared Key with Raspberry Pi Endpoint Profile
33:11 mPSK Overview
35:48 Demo: mPSK Configuration
40:04 mPSK_RaspberryPi Authorization Profile
42:47 iPSK Overview
43:58 iPSK Manager cs.co/iPSK-Manager (Open Source project, not TAC supported!)
45:28 Demo: Endpoint Custom Attributes
47:18 Demo: iPSK with Endpoint Attributes
48:23 iPSK_EndpointAttribute Authorization Profile using Endpoint Attributes
50:26 802.1X Overview
53:08 Supplicant Configuration
54:15 Demo: 802.1X corp WLAN for Employees with a Certificate
57:35 Demo: Meraki System Manager Profiles to provision certificates
59:41 dCloud ISE 3.1 Sandbox (Cisco Sellers only)
Resources:
- Configure Catalyst 9800 WLC iPSK with Cisco ISE : www.cisco.com/c/en/us/support...
- Cisco ISE & WLC - WPA2-PSK WLAN: Per-Device Passphrase (IPSK) : community.cisco.com/t5/securi...
- Guidelines for Cisco Wireless Software Release Product Bulletin (AireOS EOL) : www.cisco.com/c/en/us/product...
- ISE and Catalyst 9800 Series Integration Guide : community.cisco.com/t5/securi...
- ISE Guest Access Prescriptive Deployment Guide : community.cisco.com/t5/securi...

[@theforeverpuddle8754]

This was helpful in getting it set up with Clearpass. Thanks.

[@Bl-nj6xf]

Very nice overview

[@ILIKEPIEILIKEPIE2ify]

Will you be doing a video on securing wired with Cisco Catalyst switches?