How do I install implementing-network-access-control-with-cisco-ise?

Run `npx skills install mukul975/Anthropic-Cybersecurity-Skills/implementing-network-access-control-with-cisco-ise` in your terminal. You need to have run `npx skills init` once in your project first.

Which agent frameworks does implementing-network-access-control-with-cisco-ise support?

implementing-network-access-control-with-cisco-ise works with any agent framework supported by the Skills registry, including Claude Code, Cursor, GitHub Copilot, Cline, Codex, and Gemini CLI.

Where can I read ratings and reviews for implementing-network-access-control-with-cisco-ise?

Community ratings and review text appear on this explainx.ai skill page below the description. Reviews use a 1–5 scale and may include short written feedback from signed-in members.

How do I install implementing-network-access-control-with-cisco-ise?

Run `npx skills install mukul975/Anthropic-Cybersecurity-Skills/implementing-network-access-control-with-cisco-ise` in your terminal. You need to have run `npx skills init` once in your project first.

Which agent frameworks does implementing-network-access-control-with-cisco-ise support?

implementing-network-access-control-with-cisco-ise works with any agent framework supported by the Skills registry, including Claude Code, Cursor, GitHub Copilot, Cline, Codex, and Gemini CLI.

Where can I read ratings and reviews for implementing-network-access-control-with-cisco-ise?

Community ratings and review text appear on this explainx.ai skill page below the description. Reviews use a 1–5 scale and may include short written feedback from signed-in members.

How do I install implementing-network-access-control-with-cisco-ise?

Run `npx skills install mukul975/Anthropic-Cybersecurity-Skills/implementing-network-access-control-with-cisco-ise` in your terminal. You need to have run `npx skills init` once in your project first.

Which agent frameworks does implementing-network-access-control-with-cisco-ise support?

implementing-network-access-control-with-cisco-ise works with any agent framework supported by the Skills registry, including Claude Code, Cursor, GitHub Copilot, Cline, Codex, and Gemini CLI.

Where can I read ratings and reviews for implementing-network-access-control-with-cisco-ise?

Community ratings and review text appear on this explainx.ai skill page below the description. Reviews use a 1–5 scale and may include short written feedback from signed-in members.

How do I install implementing-network-access-control-with-cisco-ise?

Run `npx skills install mukul975/Anthropic-Cybersecurity-Skills/implementing-network-access-control-with-cisco-ise` in your terminal. You need to have run `npx skills init` once in your project first.

Which agent frameworks does implementing-network-access-control-with-cisco-ise support?

implementing-network-access-control-with-cisco-ise works with any agent framework supported by the Skills registry, including Claude Code, Cursor, GitHub Copilot, Cline, Codex, and Gemini CLI.

Where can I read ratings and reviews for implementing-network-access-control-with-cisco-ise?

Community ratings and review text appear on this explainx.ai skill page below the description. Reviews use a 1–5 scale and may include short written feedback from signed-in members.

How do I install implementing-network-access-control-with-cisco-ise?

Run `npx skills install mukul975/Anthropic-Cybersecurity-Skills/implementing-network-access-control-with-cisco-ise` in your terminal. You need to have run `npx skills init` once in your project first.

Which agent frameworks does implementing-network-access-control-with-cisco-ise support?

implementing-network-access-control-with-cisco-ise works with any agent framework supported by the Skills registry, including Claude Code, Cursor, GitHub Copilot, Cline, Codex, and Gemini CLI.

Where can I read ratings and reviews for implementing-network-access-control-with-cisco-ise?

Community ratings and review text appear on this explainx.ai skill page below the description. Reviews use a 1–5 scale and may include short written feedback from signed-in members.

How do I install implementing-network-access-control-with-cisco-ise?

Run `npx skills install mukul975/Anthropic-Cybersecurity-Skills/implementing-network-access-control-with-cisco-ise` in your terminal. You need to have run `npx skills init` once in your project first.

Which agent frameworks does implementing-network-access-control-with-cisco-ise support?

implementing-network-access-control-with-cisco-ise works with any agent framework supported by the Skills registry, including Claude Code, Cursor, GitHub Copilot, Cline, Codex, and Gemini CLI.

Where can I read ratings and reviews for implementing-network-access-control-with-cisco-ise?

Community ratings and review text appear on this explainx.ai skill page below the description. Reviews use a 1–5 scale and may include short written feedback from signed-in members.

How do I install implementing-network-access-control-with-cisco-ise?

Run `npx skills install mukul975/Anthropic-Cybersecurity-Skills/implementing-network-access-control-with-cisco-ise` in your terminal. You need to have run `npx skills init` once in your project first.

Which agent frameworks does implementing-network-access-control-with-cisco-ise support?

implementing-network-access-control-with-cisco-ise works with any agent framework supported by the Skills registry, including Claude Code, Cursor, GitHub Copilot, Cline, Codex, and Gemini CLI.

Where can I read ratings and reviews for implementing-network-access-control-with-cisco-ise?

Community ratings and review text appear on this explainx.ai skill page below the description. Reviews use a 1–5 scale and may include short written feedback from signed-in members.

How do I install implementing-network-access-control-with-cisco-ise?

Run `npx skills install mukul975/Anthropic-Cybersecurity-Skills/implementing-network-access-control-with-cisco-ise` in your terminal. You need to have run `npx skills init` once in your project first.

Which agent frameworks does implementing-network-access-control-with-cisco-ise support?

implementing-network-access-control-with-cisco-ise works with any agent framework supported by the Skills registry, including Claude Code, Cursor, GitHub Copilot, Cline, Codex, and Gemini CLI.

Where can I read ratings and reviews for implementing-network-access-control-with-cisco-ise?

Community ratings and review text appear on this explainx.ai skill page below the description. Reviews use a 1–5 scale and may include short written feedback from signed-in members.

How do I install implementing-network-access-control-with-cisco-ise?

Run `npx skills install mukul975/Anthropic-Cybersecurity-Skills/implementing-network-access-control-with-cisco-ise` in your terminal. You need to have run `npx skills init` once in your project first.

Which agent frameworks does implementing-network-access-control-with-cisco-ise support?

implementing-network-access-control-with-cisco-ise works with any agent framework supported by the Skills registry, including Claude Code, Cursor, GitHub Copilot, Cline, Codex, and Gemini CLI.

Where can I read ratings and reviews for implementing-network-access-control-with-cisco-ise?

Community ratings and review text appear on this explainx.ai skill page below the description. Reviews use a 1–5 scale and may include short written feedback from signed-in members.

How do I install implementing-network-access-control-with-cisco-ise?

Run `npx skills install mukul975/Anthropic-Cybersecurity-Skills/implementing-network-access-control-with-cisco-ise` in your terminal. You need to have run `npx skills init` once in your project first.

Which agent frameworks does implementing-network-access-control-with-cisco-ise support?

implementing-network-access-control-with-cisco-ise works with any agent framework supported by the Skills registry, including Claude Code, Cursor, GitHub Copilot, Cline, Codex, and Gemini CLI.

Where can I read ratings and reviews for implementing-network-access-control-with-cisco-ise?

Community ratings and review text appear on this explainx.ai skill page below the description. Reviews use a 1–5 scale and may include short written feedback from signed-in members.

How do I install implementing-network-access-control-with-cisco-ise?

Run `npx skills install mukul975/Anthropic-Cybersecurity-Skills/implementing-network-access-control-with-cisco-ise` in your terminal. You need to have run `npx skills init` once in your project first.

implementing-network-access-control-with-cisco-ise

implementing-network-access-control-with-cisco-ise▌

mukul975/Anthropic-Cybersecurity-Skills · updated May 25, 2026

MDX-style export adds YAML metadata + attribution linking explainx.ai and this canonical listing URL.

$npx skills install mukul975/Anthropic-Cybersecurity-Skills/implementing-network-access-control-with-cisco-ise

0 commentsdiscussion

summary

Deploy Cisco Identity Services Engine for 802.1X wired and wireless authentication, MAC Authentication Bypass, posture assessment, and dynamic VLAN assignment for network access control.

skill.md

name	implementing-network-access-control-with-cisco-ise
description	Deploy Cisco Identity Services Engine for 802.1X wired and wireless authentication, MAC Authentication Bypass, posture assessment, and dynamic VLAN assignment for network access control.
domain	cybersecurity
subdomain	network-security
tags	- cisco-ise - 802.1x - nac - radius - network-access-control - posture-assessment - mab - dynamic-vlan - eap-tls
version	'1.0'
author	mahipal
license	Apache-2.0
nist_csf	- PR.IR-01 - DE.CM-01 - ID.AM-03 - PR.DS-02

Implementing Network Access Control with Cisco ISE

Overview

Cisco Identity Services Engine (ISE) provides centralized network access control through 802.1X authentication, MAC Authentication Bypass (MAB), posture assessment, and guest access management. ISE acts as a RADIUS policy server that evaluates authentication requests from network devices (switches, wireless controllers) and returns authorization policies including VLAN assignments, downloadable ACLs (dACLs), and Security Group Tags (SGTs). This skill covers deploying ISE for enterprise wired 802.1X authentication with Active Directory integration, MAB fallback, posture compliance enforcement, and TrustSec segmentation.

When to Use

When deploying or configuring implementing network access control with cisco ise capabilities in your environment
When establishing security controls aligned to compliance requirements
When building or improving security architecture for this domain
When conducting security assessments that require this implementation

Prerequisites

Cisco ISE 3.1+ appliance or virtual machine (16 CPU cores, 64GB RAM minimum for production)
Cisco switches with 802.1X support (Catalyst 9000 series recommended)
Active Directory domain with user and computer accounts
PKI infrastructure for EAP-TLS certificate-based authentication
DNS and NTP configured consistently across ISE nodes and network devices
Supplicant software on endpoints (Windows native, AnyConnect NAM, or SecureW2)

Core Concepts

802.1X Architecture

The 802.1X framework involves three components:

Component	Role	Example
Supplicant	Client requesting network access	Windows 802.1X client, AnyConnect NAM
Authenticator	Network device controlling port access	Cisco Catalyst switch
Authentication Server	Policy decision engine	Cisco ISE (RADIUS)

Authentication Flow

1. Endpoint connects to switch port
2. Switch sends EAP-Request/Identity to endpoint
3. Endpoint responds with EAP-Response/Identity
4. Switch forwards credentials to ISE via RADIUS Access-Request
5. ISE authenticates against AD/LDAP/internal store
6. ISE evaluates authorization policy
7. ISE returns RADIUS Access-Accept with attributes (VLAN, dACL, SGT)
8. Switch enforces authorization on the port

Authentication Methods

Method	Use Case	Security Level
EAP-TLS	Certificate-based, highest security	High
PEAP-MSCHAPv2	Username/password via AD	Medium
EAP-FAST	Cisco proprietary, fast reauthentication	Medium
MAB	Non-802.1X devices (printers, IP phones)	Low

Workflow

Step 1: Configure ISE for Active Directory Integration

Navigate to Administration > Identity Management > External Identity Sources > Active Directory:

Add AD join point with domain name (e.g., corp.example.com)
Provide domain admin credentials for ISE machine account
Join ISE to the domain
Select AD groups for authorization policies:
- Domain Users - Standard employee access
- Domain Computers - Machine authentication
- IT-Admins - Privileged access
- BYOD-Users - Personal device access

Step 2: Configure Network Devices in ISE

Navigate to Administration > Network Resources > Network Devices:

Name: SW-ACCESS-01
IP Address: 10.0.1.1/32
RADIUS Shared Secret: C0mpl3x$3cretKey!
SNMP Settings: v2c, community string
Device Type: Cisco Switches
Location: Building-A-Floor-1

Create a Network Device Group hierarchy:

Device Type:
  ├── Cisco Switches
  │   ├── Access Layer
  │   └── Distribution Layer
  └── Wireless Controllers
Location:
  ├── Building-A
  └── Building-B

Step 3: Configure Switch for 802.1X

Apply this configuration to the access switch:

! Enable AAA
aaa new-model
aaa authentication dot1x default group radius
aaa authorization network default group radius
aaa accounting dot1x default start-stop group radius
aaa accounting update newinfo periodic 2880

! Configure RADIUS server
radius server ISE-PRIMARY
 address ipv4 10.0.5.10 auth-port 1812 acct-port 1813
 key 0 C0mpl3x$3cretKey!
 automate-tester username radius-test probe-on

radius server ISE-SECONDARY
 address ipv4 10.0.5.11 auth-port 1812 acct-port 1813
 key 0 C0mpl3x$3cretKey!
 automate-tester username radius-test probe-on

aaa group server radius ISE-GROUP
 server name ISE-PRIMARY
 server name ISE-SECONDARY
 deadtime 15
 ip radius source-interface Loopback0

! Enable 802.1X globally
dot1x system-auth-control

! Enable RADIUS CoA (Change of Authorization)
aaa server radius dynamic-author
 client 10.0.5.10 server-key C0mpl3x$3cretKey!
 client 10.0.5.11 server-key C0mpl3x$3cretKey!

! Enable device tracking for IP-to-MAC mapping
device-tracking tracking auto-source

! Configure access port template
interface range GigabitEthernet1/0/1-48
 description 802.1X Access Port
 switchport mode access
 switchport access vlan 100

 ! Authentication settings
 authentication host-mode multi-auth
 authentication order dot1x mab
 authentication priority dot1x mab
 authentication port-control auto
 authentication periodic
 authentication timer reauthenticate server
 authentication timer inactivity server dynamic
 authentication violation restrict

 ! 802.1X settings
 dot1x pae authenticator
 dot1x timeout tx-period 10
 dot1x max-reauth-req 2

 ! MAB fallback
 mab

 ! Enable spanning-tree portfast (required for timely auth)
 spanning-tree portfast

 ! Apply pre-auth ACL
 ip access-group PRE-AUTH-ACL in

! Pre-authentication ACL (allow DHCP, DNS, ISE portal)
ip access-list extended PRE-AUTH-ACL
 permit udp any any eq 67
 permit udp any any eq 68
 permit udp any any eq 53
 permit tcp any host 10.0.5.10 eq 8443
 permit tcp any host 10.0.5.11 eq 8443
 deny ip any any

Step 4: Configure ISE Authentication Policy

Navigate to Policy > Policy Sets:

Authentication Policy:

Rule Name	Condition	Allowed Protocols	Identity Source
Dot1X-EAP-TLS	Radius:EAP-Type EQUALS EAP-TLS	EAP-TLS	AD with Certificate
Dot1X-PEAP	Radius:EAP-Type EQUALS PEAP	PEAP-MSCHAPv2	Active Directory
MAB	Radius:Service-Type EQUALS Call-Check	MAB Lookup	Internal Endpoints
Default	Default	Default	Deny Access

Step 5: Configure ISE Authorization Policy

Authorization Policy:

Rule Name	Condition	Authorization Profile
IT-Admin-Wired	AD:Group EQUALS IT-Admins AND Dot1X	VLAN10-FullAccess
Employee-Compliant	AD:Group EQUALS Domain Users AND Posture:Compliant	VLAN100-Corporate
Employee-NonCompliant	AD:Group EQUALS Domain Users AND Posture:NonCompliant	VLAN200-Remediation
Printer-MAB	EndpointIdentityGroup EQUALS Printers	VLAN150-Printers
IP-Phone-MAB	EndpointIdentityGroup EQUALS IP-Phones	VLAN50-Voice
BYOD-Onboarding	AD:Group EQUALS BYOD-Users AND !Registered	BYOD-Portal-Redirect
Guest-Access	GuestEndpointGroup EQUALS GuestEndpoints	VLAN300-Guest
Default	Default	DenyAccess

Authorization Profiles:

Profile: VLAN100-Corporate
  VLAN: 100
  dACL: PERMIT_ALL
  SGT: Employees (0x0005)
  Reauthentication Timer: 28800

Profile: VLAN200-Remediation
  VLAN: 200
  dACL: REMEDIATION-ACL (allow only remediation server access)
  Web Redirection: Posture Discovery
  Reauthentication Timer: 300

Profile: DenyAccess
  Access Type: ACCESS_REJECT

Step 6: Configure Posture Assessment

Navigate to Work Centers > Posture:

Posture Conditions:

- Windows Firewall Enabled (Registry check)
- Antivirus Running and Updated (AV compound condition)
- OS Patch Level Current (Windows Update check)
- Disk Encryption Enabled (BitLocker check)

Posture Requirements:

Requirement: Corporate-Windows-Compliance
  OS: Windows All
  Conditions: Windows Firewall AND Antivirus AND OS Patches
  Remediation: Auto-remediate with AnyConnect ISE Posture Module

Posture Policy:

Rule: Windows-Endpoints
  Identity Group: Any
  OS: Windows All
  Requirement: Corporate-Windows-Compliance

Step 7: Configure TrustSec Segmentation

Enable SGT-based segmentation:

! On switch - enable CTS
cts credentials id SW-ACCESS-01 password CtsP@ss
cts role-based enforcement
cts role-based sgt-map 10.0.100.0/24 sgt 5

! Download SGT policy from ISE
cts role-based permissions

ISE TrustSec Matrix (SGACL):

Source SGT	Destination SGT	Policy
Employees (5)	Servers (10)	Permit_HTTP_HTTPS
Employees (5)	PCI_Zone (15)	Deny_All
IT-Admins (3)	Servers (10)	Permit_All
Guest (7)	Internet (99)	Permit_HTTP_HTTPS
Guest (7)	Servers (10)	Deny_All

Troubleshooting

# On switch - verify authentication status
show authentication sessions
show authentication sessions interface Gi1/0/1 details
show dot1x all

# Check RADIUS connectivity
test aaa server radius ISE-PRIMARY username testuser password testpass

# On ISE - check live logs
# Navigate to Operations > RADIUS > Live Logs
# Filter by MAC address or username
# Review Authentication Details for failure reason

# Common failure reasons:
# 12514 - EAP-TLS handshake failed (certificate issue)
# 22056 - Subject not found in identity store
# 24408 - User not found in Active Directory
# 24454 - User password expired

Best Practices

Monitor Mode First - Deploy in monitor mode (open authentication) before closed mode enforcement
Low-Impact Mode - Use authentication open with pre-auth dACLs for gradual rollout
MAB Database - Pre-populate endpoint database with known MAC addresses for printers, phones
Profiling - Enable ISE profiling to automatically classify endpoints by type
CoA Support - Ensure Change of Authorization is configured for dynamic policy updates
High Availability - Deploy ISE in a Primary/Secondary node pair with PAN failover
Certificate Infrastructure - Use machine certificates for EAP-TLS for strongest authentication

References

how to use implementing-network-access-control-with-cisco-ise

How to use implementing-network-access-control-with-cisco-ise on Cursor

AI-first code editor with Composer

Prerequisites

Before installing skills in Cursor, ensure your development environment meets these requirements:

›Cursor installed and configured on your development machine
›Node.js version 16.0+ with npm package manager (verify with node --version)
›Active project directory or workspace where you want to add implementing-network-access-control-with-cisco-ise

Execute installation command

Execute the skills CLI command in your project's root directory to begin installation:

$npx skills install mukul975/Anthropic-Cybersecurity-Skills/implementing-network-access-control-with-cisco-ise

The skills CLI fetches implementing-network-access-control-with-cisco-ise from GitHub repository mukul975/Anthropic-Cybersecurity-Skills and configures it for Cursor.

Select Cursor when prompted

The CLI will show a list of available agents. Use arrow keys to navigate and space to select Cursor:

◆ Which agents do you want to install to?

│

│ ── Universal (.agents/skills) ── always included ────

│ • Amp

│ • Antigravity

│ • Cline

│ • Codex

│ ●Cursor(selected)

│ • Cursor

│ • Windsurf

Verify installation

Confirm successful installation by checking the skill directory location:

.cursor/skills/implementing-network-access-control-with-cisco-ise

Reload or restart Cursor to activate implementing-network-access-control-with-cisco-ise. Access the skill through slash commands (e.g., /implementing-network-access-control-with-cisco-ise) or your agent's skill management interface.

⚠

Security & Verification Notice

We perform automated surface-level scans (Gen AI Scanner, Socket, Snyk) during installation. These checks detect common vulnerabilities but do not guarantee complete security. Always review skill source code and verify the publisher's reputation before production use.

Skills execute code in your development environment. Always verify the publisher's identity, review recent commits, and test in isolated environments before production deployment.

Additional Resources

›View source code on GitHub ›Skills CLI documentation ›Learn more about Cursor ›What are agent skills?

List & Monetize Your Skill

Submit your Claude Code skill and start earning

GET_STARTED →

Use Cases▌

Task Automation & Efficiency

Automate repetitive workflows and reduce manual effort

Example

Generate reports, summarize documents, draft communications

✓

Save 3-5 hours per week on routine tasks

Knowledge Enhancement

Learn new skills, understand complex topics, get expert guidance

Example

Explain concepts, provide examples, suggest learning resources

✓

Accelerate learning and skill development by 2x

Quality Improvement

Enhance output quality through reviews, suggestions, and refinements

Example

Review drafts, suggest improvements, catch errors

✓

Improve work quality by 30-40% with less effort

Implementation Guide▌

Prerequisites

›Claude Desktop or compatible AI client with skill support
›Clear understanding of task or problem to solve
›Willingness to iterate and refine outputs

Time Estimate

15-45 minutes depending on use case complexity

Installation Steps

1.Install skill using provided installation command
2.Test with simple use case relevant to your work
3.Evaluate output quality and relevance
4.Iterate on prompts to improve results
5.Integrate into regular workflow if valuable

Common Pitfalls

⚠Expecting perfect results without iteration
⚠Not providing enough context in prompts
⚠Using skill for tasks outside its intended scope
⚠Accepting outputs without review and validation

Best Practices▌

✓ Do

+Start with clear, specific prompts
+Provide relevant context and constraints
+Review and refine all outputs before using
+Iterate to improve output quality
+Document successful prompt patterns

✗ Don't

−Don't use without understanding skill limitations
−Don't skip validation of outputs
−Don't share sensitive information in prompts
−Don't expect skill to replace human judgment

💡 Pro Tips

★Be specific about desired format and style
★Ask for multiple options to choose from
★Request explanations to understand reasoning
★Combine AI efficiency with human expertise

When to Use This▌

✓ Use When

Use when skill capabilities match your task, clear ROI on time saved, and you can validate outputs. Best for repetitive tasks, learning, and quality improvement.

✗ Avoid When

Avoid when task requires deep expertise you can't validate, involves sensitive decisions, or when learning process is more valuable than speed of completion.

Learning Path▌

1Familiarize yourself with skill capabilities and limitations
2Start with low-risk, non-critical tasks
3Progress to more complex and valuable use cases
4Build expertise through regular use and experimentation

Discussion

Product Hunt–style comments (not star reviews)

No comments yet — start the thread.

general reviews

Ratings

4.5★★★★★30 reviews

★★★★★Pratham Ware· Dec 28, 2024
Useful defaults in implementing-network-access-control-with-cisco-ise — fewer surprises than typical one-off scripts, and it plays nicely with `npx skills` flows.
★★★★★Diya Desai· Dec 20, 2024
We added implementing-network-access-control-with-cisco-ise from the explainx registry; install was straightforward and the SKILL.md answered most questions upfront.
★★★★★Carlos Thompson· Nov 11, 2024
implementing-network-access-control-with-cisco-ise reduced setup friction for our internal harness; good balance of opinion and flexibility.
★★★★★Diya Jackson· Oct 2, 2024
Registry listing for implementing-network-access-control-with-cisco-ise matched our evaluation — installs cleanly and behaves as described in the markdown.
★★★★★Yash Thakker· Sep 25, 2024
implementing-network-access-control-with-cisco-ise is among the better-maintained entries we tried; worth keeping pinned for repeat workflows.
★★★★★William Thomas· Sep 25, 2024
implementing-network-access-control-with-cisco-ise is among the better-maintained entries we tried; worth keeping pinned for repeat workflows.
★★★★★William Bansal· Sep 21, 2024
Useful defaults in implementing-network-access-control-with-cisco-ise — fewer surprises than typical one-off scripts, and it plays nicely with `npx skills` flows.
★★★★★Dhruvi Jain· Aug 16, 2024
Keeps context tight: implementing-network-access-control-with-cisco-ise is the kind of skill you can hand to a new teammate without a long onboarding doc.
★★★★★Sophia Sethi· Aug 16, 2024
Keeps context tight: implementing-network-access-control-with-cisco-ise is the kind of skill you can hand to a new teammate without a long onboarding doc.
★★★★★Sophia Haddad· Aug 12, 2024
I recommend implementing-network-access-control-with-cisco-ise for anyone iterating fast on agent tooling; clear intent and a small, reviewable surface area.

showing 1-10 of 30

1 / 3