topic Re: Cisco ISE rewrite in Network Access Control

Cisco ISE rewrite

Richard Lucht — Fri, 21 Feb 2020 18:54:21 GMT

I would like to rewrite an identity mac address to parse out the - from xx-xx-xx-xx-xx-xx to a xxxxxxxxxxxx. I am trying to use what an agency already built in AD to store MAC addresses instead of rebuilding and importing thousands of mac address.

Re: Cisco ISE rewrite

Francesco Molino — Wed, 25 Apr 2018 03:24:29 GMT

Hi

I just want to understand first what you're trying to achieve.
You want to rewrite the identity of mac address by removing dashes before sending it to AD for authentication?

Re: Cisco ISE rewrite

Richard Lucht — Wed, 25 Apr 2018 20:30:29 GMT

I was able to find what I needed, I was trying to authenticate devices on to the network that are plugged into a Juniper switch. The agency in question uses a windows radius server to authenticate the devices through mac address in AD. I was trying to setup ISE to authenticate them using their AD. After some tinkering and testing I was able to set up a policy set that would authenticate. Their usernames at first were coming over with dashes and I needed them removed. I reworked my protocols used and was able to fix my own issue. Thanks though.

Re: Cisco ISE rewrite

Francesco Molino — Thu, 26 Apr 2018 02:16:32 GMT

Ok good you find a way to solve your issue.

Re: Cisco ISE rewrite

mz_ccie18676 — Tue, 12 Apr 2022 12:48:43 GMT

Similar problem i was able to find this old post, what have you changed in ISE to send MAC address without dashes to AD. If i setup my MAC as user in AD inlcuding dashes it works, once i remove dashes it does not work. Ideally we want to use it without dashes. Thoughts?