Network Infrastructure Specialist

We need to move away from Trustsec over radius as it is causing issues for aaa
server state in switches on dot1x, and so this is hampering the 802.1x
authentications on switches where this fails. (it fails randomly on switches
for no good reason, but one trigger is for sure when the MTU size issues are
present in SDWAN). To make switches more resilient in regards to ISE platform
and service availibility, we should move to Trustsec over RestAPI.

RestAPI in ISE must walk all the NAD's there and update the RestAPI password
for each device. (scripting task), Switches must be updated with new RestAPI
call for trustsec, switches must be updated with Profiling over Radius config
and...