I am exploring iPSK for a college campus. We have 9800 WLCs and use ISE AAA.
One interesting features of this setup is private-group P2P blocking. My understanding is this would allow a student to use the same PSK for their non 802.1x devices and do private mDNS discovery.
There are some features lacking within ISE, including self registration and PSK management. I found their unofficial product iPSK Manager (https://community.cisco.com/t5/security-documents/ipsk-identity-pre-shared-key-manager-portal-server-for-ise/ta-p/3904265).
Does anyone have this implemented or recommend other solutions for this specific feature? We don’t plan to replace ISE, but something will be needed to augment this capability.
Thanks
No comments:
Post a Comment