topic Perfect, thanks Jan in Network Access Control

ISE Authorization Condition

Terry — Mon, 11 Mar 2019 06:49:20 GMT

I have a requirement to setup ISE in such a way that it differentiates between switches within a switch stack. Does anyone know if there is an expression that I could use within an authorization compound condition that will achieve the following:

If a device using MAB connects to switch 1 in the stack it will be assigned to VLAN 10.

If the same device connects to switch 2 in the same stack it will be assigned to VLAN 20.

Thanks

Terry

You could use the interface

jan.nielsen — Mon, 30 May 2016 21:51:00 GMT

You could use the interface numbering as a condition, the switch does not send any information about stack numbering. I don't remember the specific av pair, but you should be able to find it in the live log details.

Perfect, thanks Jan

Terry — Tue, 31 May 2016 11:10:06 GMT

Perfect, thanks Jan

Radius:NAS-Port-Id Starts with GigabitEthernet1/0/

Regards

Terry