Question

A network engineer configures a downloadable ACL (dACL) in ISE to be pushed to Cisco Catalyst switches as part of an authorization profile for contractor endpoints. After saving the authorization profile, the engineer wants to ensure the switches will accept and apply the dACL without syntax errors. Which action should the engineer take within ISE before deploying the dACL to production?

Accepted Answer

Use the 'Check DACL Syntax' function under Policy > Policy Elements > Results > Authorization > Downloadable ACLs

Answer

Enable RADIUS accounting on the switch so ISE can validate the ACL against live traffic

Answer

Convert the dACL into a named ACL and manually configure it on each switch to test it

Answer

Assign the dACL to a VLAN interface in the authorization profile to verify compatibility