topic NEAT interface template delivery description = device name in Network Access Control

NEAT interface template delivery description = device name

rodrigofilgueira5562 — Wed, 29 Sep 2021 11:21:08 GMT

Hi all,

I have a fully functional Template script getting the policy on ISE and applying it on switchport. Follow the script:

!
template neat-aps2802
switchport trunk native vlan 1123
switchport mode trunk
description ACCESS_POINT
!

Is it possible to receive the device name or device description registered in the Endpoint ISE attributes through RADIUS variable to the description? Here's an example of what I need.

!
template neat-aps2802

description $devicename
switchport trunk native vlan 1123
switchport mode trunk
description ACCESS_POINT
!

Re: NEAT interface template delivery description = device name

howon — Thu, 30 Sep 2021 00:10:58 GMT

No, but if you could spare some VLANs, you can name the VLANs as device name and have it sent via RADIUS to ISE:

https://community.cisco.com/t5/security-documents/advanced-ise-tips-to-make-your-deployment-easier/ta-p/3850189#toc-hId--574335339

Re: NEAT interface template delivery description = device name

rodrigofilgueira5562 — Fri, 01 Oct 2021 18:55:28 GMT

I have 50 VLANs and approximately 600 Endpoints. I need something more specific, using the VLAN with a common name to all of the same VLAN makes my routine very laborious.

I've already thought about Template NEAT interface where the description calls some kind of script that takes the InternalEndpoint.Description and passes it as a parameter, even more without success.