topic Re: AD or LDAP groups import Limit in Network Access Control

AD or LDAP groups import Limit

rroulhac — Wed, 30 Nov 2016 21:00:33 GMT

All,

Is there a limit for pulling AD or LDAP groups from AD/LDAP environments when usng the evaluation license with ISE 2.1?

Grace and Peace,

Robert E Roulhac Jr

Virtual Systems Engineer II

Cisco TSN (Technical Solutions Network)

rroulhac@cisco.com

Office: 919.5745455

Re: AD or LDAP groups import Limit

Jason Kunst — Wed, 30 Nov 2016 21:18:08 GMT

There is no difference in regards to this with eval vs purchased license

Re: AD or LDAP groups import Limit

rroulhac — Wed, 30 Nov 2016 21:20:54 GMT

So then just to clarify, the limit for pulling LDAP groups in to ISE is 100 with eval and 100 with permanent licenses?

Re: AD or LDAP groups import Limit

hslai — Wed, 30 Nov 2016 22:54:05 GMT

Licensing for 100 endpoints is NOT limiting the AD/LDAP groups. We would be able to add at least 1000 groups into AD/LDAP configuration.

Re: AD or LDAP groups import Limit

rroulhac — Thu, 01 Dec 2016 17:16:23 GMT

The 100 limit is not in regards to licensing but in regards to the GUI expressed limitation. Please see the screen shot below:

The GUi says that there is a Group limit when importing LDAP groups. Why is that?

Grace and Peace,

Robert E Roulhac Jr

Virtual Systems Engineer II

Cisco TSN (Technical Solutions Network)

rroulhac@cisco.com

Office: 919.5745455

Re: AD or LDAP groups import Limit

hslai — Thu, 01 Dec 2016 20:51:04 GMT

Right. That particular web UI will only display up to 100 groups. Thus, we use filters to limit each retrieval to 100 groups and select the ones we want. Then, change the filter, and repeat the process.