topic Re: Authorization Profile (Advanced Attributes Settings) in ISE in Network Access Control

Authorization Profile (Advanced Attributes Settings) in ISE

Lucas Woo — Sun, 15 May 2022 11:13:08 GMT

Hello,

As the title suggests, I wanna ask you about "Advanced Attributes Settings" in ISE

My boss told me to add below settings, but I couldn`t understand what this is and how to configure.

-------------------------------------------------------
Cisco:cisco-av-pair = NCS:role0=Root
Cisco:cisco-av-pair = NCS:virtual-domain0=ROOT-DOMAIN
-------------------------------------------------------

I could find the "Cisco:cisco-av-pair" from the lists, but couldn`t do the "NCS:role0=Root" and "NCS:virtual-domain0=ROOT-DOMAIN" from there.

Is it ok to fill in that directly in the list of Attribute Values ?

Re: Authorization Profile (Advanced Attributes Settings) in ISE

Marcelo Morais — Sun, 15 May 2022 14:24:55 GMT

Hi @Lucas Woo ,

you are able to type the value, just like this:

Note: you are able to check the Cisco-AV-Pair at Details of RADIUS Authenticaton, for ex.:

Hope this helps !!!

Re: Authorization Profile (Advanced Attributes Settings) in ISE

Lucas Woo — Mon, 16 May 2022 13:06:59 GMT

@Marcelo Morais
Thank you always and it become big help for me.

I understand I can type the value, but can`t find details of RADIUS Authentication.

Is it explained in ISE or Cisco documents?

I would appreciate it if you could tell me that.

Re: Authorization Profile (Advanced Attributes Settings) in ISE

Ping Zhou — Mon, 16 May 2022 17:03:28 GMT

Perhaps this helps…

https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/3-2/admin/guide/bk_CiscoPrimeInfastructure_3_2_AdminGuide/bk_CiscoPrimeInfastructure_3_2_AdminGuide_chapter_0110.html#task_1144189