Multiple results in Policy

sstermann — Thu, 12 Sep 2019 14:06:33 GMT

Hi,

I am in the process of migrating the rules from an ACS to the ISE. On the ACS several results are evaluated in one rule.

First result:

DACL = InternalUser:DACL
Class = InternalUser:VPN-Group
Framed-IP-Address = InternalUser:Assigned-IP-Address

If one or more fields are empty, the empty fields should be filled from another result.

DACL is empty

DACL = PERMIT_USER_ACL

If DACL or Framed-IP-Address are empty, these fields will be filled from the other result. This does not work for the Class field.
Does anyone have an idea how to get this done?

I am using ISE 2.4 Patch 9

Thanks a lot

Sebastian

topic Multiple results in Policy in Network Access Control

Multiple results in Policy