topic Re: Automatic NAD identity group attibute based in Network Access Control

Automatic NAD identity group attibute based

TVmaster — Tue, 16 Jul 2019 17:52:02 GMT

hi fellows

can anyone tell me if ise can get some attribute to place nad inside some Identity group automatically?

i have ten different cisco switches models in my campus , and i want to create different policies based on switch model, but automatically , without having to put my swiches in an identity group manually .

Re: Automatic NAD identity group attibute based

Jason Kunst — Tue, 16 Jul 2019 18:33:30 GMT

No I don't think so, you have to manually add each switch and put it in the respective NDG to identify its hierarchy

Re: Automatic NAD identity group attibute based

howon — Wed, 17 Jul 2019 12:22:25 GMT

Since these are Cisco switches you can customize NAS-ID attribute to reflect switch model and use it in the ISE policy. Please check out 'Differentiating specific network device' section of the following document for more information:

https://community.cisco.com/t5/security-documents/advanced-ise-tips-to-make-your-deployment-easier/ta-p/3850189#toc-hId--574335339