topic Re: Condition Library issue in Network Access Control

Condition Library issue

jasonb113083 — Mon, 09 Oct 2017 23:21:03 GMT

Deployed a clean install of ISE 2.3. I have several nodes deployed and haven't had any issues, until I started looking to build the policy sets. When I go under "Work Centers/Device Administration/Policy Elements/Condition library" there is a whole host of prebuilt conditions shown.

But when I go under "Work Centers/Device Administration/Device Admin Policy Sets" and try to create a new policy set, there are no conditions shown for me to select.

This same behavior happens when trying to build policies under the Network Access portions as well. Has anyone else run into this issue? Any ideas on how to fix this or if I am missing something obvious? I have a bug on a few discussions here, but it doesn't seem to be the same issue as I am seeing. I have a TAC case open, but I thought I would throw it out here in the mean time. Any help is appreciated.

Re: Condition Library issue

hslai — Tue, 10 Oct 2017 01:16:25 GMT

For Device Admin (T+), it's normal to have no library conditions while configuring the T+ policy set conditions. Please, instead, use the editor on the right-hand side to pick from the attribute list.

For Network Access (RADIUS), that is not normal and there should be some built-in library conditions (e.g. Switch_Local_Web_Authentication) suitable as RADIUS policy set conditions.

Is this deployment upgraded to ISE 2.3? You would probably need to provide a copy of your CFG backup to TAC so TAC may try a recreate.

Re: Condition Library issue

jasonb113083 — Tue, 10 Oct 2017 14:05:48 GMT

I appreciate you trying to help, it appears that the only issue was not being used to the new user interface. Once I specified a protocol on the main condition page and saved, I was then able to click the "view" arrow to the right and that is where you are able to build out the actual policies. I've attached some screenshots in case anyone else does this same thing.