Abstract

Campus network’s access become more complex with the exponential growth of different kinds of mobile devices. When enterprises deploy new network equipment, one key requirement will be new equipment’s interoperability with existing Network Access Control (NAC) solutions for user endpoints’ secure access.

H3C commissioned Tolly to verify its campus network solution’s interoperability with the Cisco Identity Services Engine (ISE), a third-party NAC solution. The H3C campus network solution includes the wireless solution which uses the H3C wireless Access Controller (AC) as the NAC policy enforcement point for Wi-Fi users, and the Ethernet switch solution which uses the H3C campus switch as the NAC policy enforcement point for wired users. Tests covered user/endpoint authentication (802.1X, MAC and portal), device management authentication (TACACS), authorization, CoA, endpoint profiling, BYOD, posture assessment, and guest lifecycle management. With the H3C wireless Access Controller and the H3C campus switches as NAC policy enforcement points, the H3C campus network solution passed all test cases to interoperate with Cisco ISE.