topic ISE Import Endpoints via CSV in Network Access Control

ISE Import Endpoints via CSV

r.martins — Mon, 11 Mar 2019 03:05:13 GMT

Hello,

i have an problem importing endpoints via CSV. I need to group the endpoints in "Endpoint Identity Groups", but the template doesn't have this field!

The deployment is just base licensed, so i can't do it on behalf of "Endpoint profile"

Is there any way to mass import endpoints with identity group information?

regards,

Roberto

ISE Import Endpoints via CSV

Jatin Katyal — Sun, 17 Feb 2013 22:10:25 GMT

This is known issue.

CSCua05433 Import of identity groups and identities does not maintain membership

Symptom:

Identity group data is missing when exporting and importing endpoints.

Conditions:

User attempts to export endpoints and import into ISE using csv import.

Workaround:

Edit each endpoint and add identity group.

Additional Information:

Currently endpoint identity group is not being exported as part of endpoint data when exporting endpoints and there is no option to import endpoint identity group as part of bulk (csv) import of endpoints.

Regards,

Jatin Katyal

- Do rate helpful posts -

ISE Import Endpoints via CSV

Venkatesh Attuluri — Tue, 25 Jun 2013 17:49:34 GMT

I think Mass import and export of endpoints with Identity groups information is not possible . CSV file such as the MAC address and Endpoint Policy etc

If you are importing from LDAP these are fields contained in it.

Field Name	Description
Host	Enter the hostname or the IP address of an LDAP server.
Port	Enter the configured port of an LDAP server. Note To import from an LDAP server, use port number 389. To import from an LDAP server over SSL, use port number 636.
Enable Secure Connection	To import from an LDAP server over SSL, check the Enable Secure Connection check box.
Root CA Certificate Name	Click the drop-down arrow to view the trusted CA certificates.
Anonymous Bind	To enable the anonymous bind, check the Anonymous Bind check box.
Admin DN	Enter the distinquished name (DN) configured for the LDAP administrator in the slapd.conf configuration file.
Password	Enter the password configured for the LDAP administrator in the slapd.conf configuration file.
Base DN	Enter the distinguished name of the parent entry. Note You can find the distinguished name of the parent entry from the LDIF file that you use for import. For example, dc=cisco, dc=com
MAC Address objectClass	Enter the query filter from the LDIF file, which is used for importing the MAC address, for example, ieee802Device.
MAC Address Attribute Name	Enter the returned attribute name from the LDIF file, which you use for import. For example, macAddress.
Profile Attribute Name	Enter the surname of the parent entry. Note You can find the surname of the parent entry in the LDIF file that you use for import. For example, sn.
Time Out [seconds]	Enter the time in seconds between 1 and 60 seconds.

Re: ISE Import Endpoints via CSV

routerhand99 — Thu, 17 Oct 2013 16:40:47 GMT

I guess that makes sense. I was unaware that the base license had a different template format for import/export.

I am working mostly with a wireless license ISE deployment. I routinely import endpoints using the following template;

I create a 3 column CSV like this;

MAC Endpoint Policy Endpoint Identity Group

MAC in hex Tablets Tablets

This works fine for me.

I am first importing from LDAP and having some issues regarding static assignment of the Endpoint Identity Group.

The endpoints come in with static = false (unchecked). So, after I bring them in my workaround has been to export the entire database of enpoints to a .csv. Delete the selected endpoints. Now I re-import them from the .csv I exported and Enpoint Identity Group static is true now (checked).

The group selection and change features for endpoints like so many things in ISE are extremely limited.

I have a base license install as well so I will have to look at the difference.

Re: ISE Import Endpoints via CSV

Henderson Land - ITD Net team — Mon, 11 Sep 2017 09:49:40 GMT

My case is that we patched the ISE 1.4.253 to patch10 (or 11) and the importing endpoints via CSV will not update static group assignment. The static group assignment is either unchecked or sticked to the old static group assignment.

I tried to delete all endpoints and import them again via CSV, the static group assignment is still either unchecked or sticked to the old static group assignment.

Once I removed patch 10 (or 11), the importing endpoints can carry the new static group assignment.

Re: ISE Import Endpoints via CSV

geder — Wed, 15 Nov 2017 12:34:02 GMT

Many thanks, uninstall patch 11 helped me too!
Now running Path 9.
Hopefully they fix it once more with patch 12 on ISE 1.4

Re: ISE Import Endpoints via CSV

ajc — Wed, 15 Nov 2017 15:45:13 GMT

Be aware that support on 1.4.0.253 version expires in 1 year approximately. I have had multiple issues running 2.2 version so if you are planning an upgrade in the near future, use 2.3.

Second, 3395 ISE does not support 2.x version.