topic Re: Where to configure dictionary for advanced attributes in authorization profiles? in Network Access Control

Where to configure dictionary for advanced attributes in authorization profiles?

Madura Malwatte — Thu, 23 Jan 2020 18:24:34 GMT

For the life of me I cant seem to find where these dictionaries are configured. I am migrating an ISE 1.3 config to ISE 2.3, I cant find where these would be configured in either gui.

Can someone point me in the right direction. Where are these dictionaries configured. I went to dictionaries tab and these ones are not there, example Cisco-VPN3000, APC (looks like custom), Cisco-BBSM, etc.

Re: Where to configure dictionary for advanced attributes in authorization profiles?

Rob Ingram — Thu, 23 Jan 2020 18:51:48 GMT

Hi,

They are hidden under Dictionaries > RADIUS Vendors.

HTH

Re: Where to configure dictionary for advanced attributes in authorization profiles?

Colby LeMaire — Thu, 23 Jan 2020 18:52:28 GMT

Go to Policy->Policy Elements->Dictionaries. Then you will see System and User as the top-level folders. Anything that comes with ISE by default is in System and any custom dictionaries will fall under User. Expand the System folder, then expand the Radius folder. Under there, you will see Radius Vendors. That is where you will find Cisco-VPN3000 and Cisco-BBSM. APC is not listed in my ISE instance so you can find it under your User folder if someone added it to your system.

Re: Where to configure dictionary for advanced attributes in authorization profiles?

Madura Malwatte — Wed, 29 Jan 2020 23:27:15 GMT

Hi RJI / Colby,

Thanks for your prompt responses. Yes, it was under the system > Radius folder. And I was able to create a custom radius vendor in this folder.