11-25-2019 12:24 AM
Hi Team,
One of the customer is looking for the 802.1x authentication in a wired network with location based restriction. Customer would like to achieve location based authentication based upon the switch Id & may be port ID attributes.
I would like to check if there is any way through which we can achieve the same. I know we have radius attributes available however, not sure if the same could not achieve the same or not.
If it is not available right now, if there something available in ISE roadmap. Please suggest!
best Regards
Nishant
Solved! Go to Solution.
11-25-2019 06:37 AM
11-28-2019 08:36 PM
Hi @nisgupta
Have you checked whether the NAS-Port-ID(87) attribute contains the information that you need?
I checked my setup for an example of a Wired MAB request and I can see:
NAS-Port-Id == "FiveGigabitEthernet1/0/2"
You can probably create a regex that matches on a pattern that represents a module/slot and port etc.
regards
11-25-2019 06:37 AM
11-25-2019 07:34 PM
11-28-2019 08:36 PM
Hi @nisgupta
Have you checked whether the NAS-Port-ID(87) attribute contains the information that you need?
I checked my setup for an example of a Wired MAB request and I can see:
NAS-Port-Id == "FiveGigabitEthernet1/0/2"
You can probably create a regex that matches on a pattern that represents a module/slot and port etc.
regards
11-28-2019 08:42 PM
Thanks Arnab ! This would certainly help..
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide