topic Re: MACAddress is invalid for endpoint when bulk importing in Network Access Control

MACAddress is invalid for endpoint when bulk importing

Koldts — Thu, 22 Jun 2023 11:43:37 GMT

Hello,

I'm trying to clean up our ISE and therefore need to bulk update endpoints to go into identity groups. But when i try to import a CSV file with only: MACAddress,EndPointPolicy,IdentityGroup i get an error saying "MACAddress is invalid for endpoint(s)".

I have tried with MAC format: AA:BB:CC:DD:EE:FF, aa:bb:cc:dd:ee:ff, AA-BB-CC-DD-EE-FF, aa-bb-cc-dd-ee-ff, AABB.CCDD.EEFF, aabb.ccdd.eeff. None of these will go through and i get the above error. What can this be?

Re: MACAddress is invalid for endpoint when bulk importing

hslai — Sat, 24 Jun 2023 04:33:59 GMT

@Koldts I tried the following in a CSV and it imported fine.

MACAddress,EndPointPolicy,IdentityGroup AA:BB:CC:DD:EE:FF,,

Re: MACAddress is invalid for endpoint when bulk importing

Koldts — Wed, 28 Jun 2023 07:39:12 GMT

I have tried to update an existing device with a new Identity Group and also importing a new MAC without putting an identity group. The only one who gets imported are the one without an identity group. So somehow my/the syntax is broken.

What i try to import is:

MACAddress,EndPointPolicy,IdentityGroup
AA:BB:CC:DD:EE:FF,,"AP-DEVICES"

The Identity group is already created and functional.

Re: MACAddress is invalid for endpoint when bulk importing

Aref Alsouqi — Thu, 29 Jun 2023 17:11:40 GMT

Did you try to remove the quotation marks (") from the identity group name and import with a simple name?

Re: MACAddress is invalid for endpoint when bulk importing

hslai — Sun, 02 Jul 2023 06:53:37 GMT

@Koldts Usually I use the admin webUI to manually assign one, export it out, and see the content.

Attached is a sample CSV file with static group assignment.

Re: MACAddress is invalid for endpoint when bulk importing

Koldts — Mon, 03 Jul 2023 07:41:26 GMT

Doing the Identity group without quotation marks seems to do the trick. I have now updated an access point to be in my identity group AP-DEVICES with the template:

MACAddress,EndPointPolicy,IdentityGroup
AA:BB:CC:DD:EE:FF,,AP-DEVICES

Funny that when i try to export the same AP, the identity group is now in quotation marks.

But thank you!