2-2
Cisco TrustSec Configuration Guide
OL-22192-01
Chapter 2 Configuring the Cisco TrustSec Solution
Configuration Overview
• Base configuration for the Wireless LAN Controller
• Phased Deployment Overview
• Monitor Mode
• Migrating from Monitor Mode
• Low Impact Mode
• Closed Mode
• ISE Profiling Services
• ISE Base Configurations: Promiscuous VMware
• Central Web Authentication
• User Authentication and Authorization to Multiple Active Directory Domains
• ISE Deployment Type and Guideline
• Using Certificates to Differentiate Access
• On-boarding and Provisioning
• Server to Server Segmentation using Security Group Access
• Deploying EAP Chaining with AnyConnect NAM and Cisco ISE
• Failed Authentications & Authorizations
Supported Hardware and Software
For a list of TrustSec supported hardware and software per TrustSec release, see,
Release Notes for Cisco TrustSec General Availability Releases at the following URL:
http://www.cisco.com/en/US/docs/switches/lan/trustsec/release/notes/rn_cts_crossplat.html
See also, the Release Notes, Configuration Guides, and Command References for your device.
Prerequisites for Cisco TrustSec
The following are the prerequisites for establishing a TrustSec network with Catalyst switches:
• TrustSec software on all network devices
• Connectivity between all network devices
• Network availability of the Cisco Secure ACS 5.1, or Cisco ISE operating with a TrustSec license
• Directory, DHCP, DNS, certificate authority, and NTP servers functioning in the network
To Next Page