cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
 
ISE 2.3 Patch 7 has been posted. This will be the last patch for the ISE 2.3 release!
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

81
Views
0
Helpful
2
Replies
Highlighted
Cisco Employee

Push multiple attributes to SQL via ODBC

We are looking for a way to pass multiple RADIUS attributes to an external ODBC (SQL) server for authentication / authorization.  As of right now, we are only able to send the username which greatly limits our ability to properly query the SQL database for proper authorization.  Currently the customer is doing this in Clearpass with the following string:

 

call clearpass_eap_attributes("%{Authentication:Username}", "%{Authentication:Full-Username}", "%{Connection:Client-Mac-Address}", "%{Connection:AP-Mac}", "%{Connection:AP-Name}", "%{Connection:SSID}", "%{Connection:NAD-IP-Address}");

 

The names wrapped inside of %{} are Aruba-isms, but here's a list of IETF radius attribute names and numbers that those equate to:

 

User-Name (1)

NAS-IP-Address (4)

Called-Station-Id (30)

Calling-Station-Id (31)

Everyone's tags (2)
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: Push multiple attributes to SQL via ODBC

we can only query 1 attribute today. 

please reach out to PM team to know about the roadmap. 

 

Thanks,

Nidhi 

2 REPLIES 2
Cisco Employee

Re: Push multiple attributes to SQL via ODBC

Cisco Employee

Re: Push multiple attributes to SQL via ODBC

we can only query 1 attribute today. 

please reach out to PM team to know about the roadmap. 

 

Thanks,

Nidhi