topic How to import bulk endpoints into identity group? in Network Access Control

How to import bulk endpoints into identity group?

getaway51 — Fri, 01 Nov 2019 07:34:42 GMT

Hi,

Normally i go to context visibility and edit. Then change the default identity grp to customize identity group.

Is there a better or fastest way to do this?

How can i import a bulk of endpoints tht i found during monitor mode to a customize identity grp? Normally wht are the best practices & procedures for 1) & 2)?

1) check those endpoints mac tht fail

2) import into the identity grp

Re: How to import bulk endpoints into identity group?

howon — Sat, 02 Nov 2019 07:22:50 GMT

Yes, for handful of endpoints you can use context visibility, but for more that a dozen I would leverage import function. ISE profiling can help where it can give you hints on what the device profile is but in the end you will have to use your knowledge of the environment to determine which group to assign and provide policy.

Re: How to import bulk endpoints into identity group?

getaway51 — Sat, 02 Nov 2019 08:56:48 GMT

I am trying to ADD new Avaya VoIP Phone MAC address into Identity group Avaya-VoIP

May i know if import using the template, wht are the fields that shld ONLY fill in? I am thinking of MACaddress and IdentityGroupAssignment only.

Will the ISE later change the device PolicyAssignment to Avaya-Device(this is the one detected by default if not added manually)? Does this really matter?

Re: How to import bulk endpoints into identity group?

hslai — Thu, 07 Nov 2019 04:14:50 GMT

For CSV import of endpoints, the first row should be, at minimal:

MACAddress,EndPointPolicy,IdentityGroup

If EndPointPolicy is blank, then it assumes dynamic profiling. If IdentityGroup is blank, then it assumes dynamic group. If either filled, then the filled field is statically assigned.