topic Re: Cisco ISE policy dic in Network Access Control

Cisco ISE policy dic

MonkeyBear007 — Wed, 02 Jul 2025 22:12:19 GMT

I need to look up usable ISE policy field options. With so many available, I require definitions and available choices. Is the dictionary the only lookup method, or are there better options?

Re: Cisco ISE policy dic

Arne Bier — Wed, 02 Jul 2025 00:12:35 GMT

Please rephrase that into a proper question.

Re: Cisco ISE policy dic

MonkeyBear007 — Wed, 02 Jul 2025 22:12:33 GMT

just did

Re: Cisco ISE policy dic

Arne Bier — Thu, 03 Jul 2025 01:21:32 GMT

ok - after you edited your original question, it makes a bit more sense to me.

You are right - if you look into the ISE RADIUS Dictionary, you will see a lot of vendor attributes - and there is no manual/doc that comes with it. At best, the dictionary tells you the data type (e.g. integer or string etc.) - but that's it.

As a RADIUS engineer you need to know what attributes your NAD devices support/need to get the job done. That usually involves reading vendor documentation.

For the most part, we tend to use the same attributes for MAB and DOT1X (e.g. Calling-Station-ID and Service-Type etc.)

I tend to search the web for these sorts of things. And there are RFCs - classic one is RFC2865 and RFC2866. And newer ones too.