CISCO ISE COmpactibility with 2960 Switch

ciscocisco-ios

I Was checking the switches which are compatible with Cisco ISE solution, from their site i saw that they support Catalyst 2960-S but in my environment i have 2960-24TC-S, I would like to know what if my switch is compatible and the difference between 2960TC-S and 2960-S.

Best Answer

According to the compatibility matrix for Cisco ISE 2.4, your switch is not fully supported. You can also see the difference in relation to ISE between the 2960 and 2960-S.

Remember for IOS 12.2.55:

The IOS 12.x version does not fully support the Posture and Guest flows because of CSCsx97093. As a workaround, when you configure URL redirect in Cisco ISE, assign a value to “coa-skip-logical-profile.”

Full Cisco ISE 2.4 compatibility matrix:

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/compatibility/b_ise_sdt_24.html

Related Solutions

Cisco – Connect 3 Cisco switches via ethernet ports

We have been using 2 Cisco 2960-S 48 Port switches which were connected together using a regular Cat5e cable and everything was working fine, however we have purchased a 3rd switch of the same model and need to connect it to the other switches.

What would be the best way to connect all 3 switches?

Generally, you connect all three switches in a "triangle". There is no problem with this configuration as long as you have some version of spanning-tree running.

I'm not sure what state your network is in right now, so I'm assuming you might not have spanning-tree running, and you have not connected the third switch. Generic steps to introduce the new switch:

Make sure the third switch is disconnected. Configure spanning-tree mode rapid-pvst on all switches.
Configure spanning-tree vlan 1-4094 priority 4096 on the switch closest to your Internet / WAN connection
Configure spanning-tree vlan 1-4094 priority 8192 on the other (running) switch
Configure spanning-tree portfast disable on all ports connecting to the other switches.

I gave you a very basic recipe to make this work... depending on the bandwidth needs of the clients, you might want to bundle multiple links between these switches with LACP or EtherChannel.

Non-Cisco SFPs – Err-Disable State in 2960s and 2960 PoE Switch

After some research I determined that Cisco automatically disables non cisco branded SFPs. In order to prevent them from defaulting to err-disable I had to enter the following commands in config mode.

Router(config)#service internal
Router(config)#no errdisable detect cause gbic-invalid
Router(config)#service unsupported-transceiver

I then configured the SFP interface to a management vlan, connected a laptop to it by changing the laptop's IP address and confirmed that the SFP does indeed take traffic. Hope this helps!

Best Answer

Related Solutions

Cisco – Connect 3 Cisco switches via ethernet ports

Non-Cisco SFPs – Err-Disable State in 2960s and 2960 PoE Switch

Related Topic