Authorization Profile (Advanced Attributes Settings) in ISE

[Lucas Woo]

Hello,

As the title suggests, I wanna ask you about "Advanced Attributes Settings" in ISE

My boss told me to add below settings, but I couldn`t understand what this is and how to configure.

-------------------------------------------------------
Cisco:cisco-av-pair = NCS:role0=Root
Cisco:cisco-av-pair = NCS:virtual-domain0=ROOT-DOMAIN
-------------------------------------------------------

I could find the "Cisco:cisco-av-pair" from the lists, but couldn`t do the "NCS:role0=Root" and "NCS:virtual-domain0=ROOT-DOMAIN" from there.

Is it ok to fill in that directly in the list of Attribute Values ?

[Marcelo Morais · Accepted solution]

Hi @Lucas Woo ,

 you are able to type the value, just like this:

Note: you are able to check the Cisco-AV-Pair at Details of RADIUS Authenticaton, for ex.:

Hope this helps !!!

[Lucas Woo]

@Marcelo Morais 
Thank you always and it become big help for me. 

I understand I can type the value, but can`t find details of RADIUS Authentication.

Is it explained in ISE or Cisco documents?

I would appreciate it if you could tell me that.

[Ping Zhou]

Perhaps this helps…

https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/3-2/admin/guide/bk_CiscoPrimeInfastructure_3_2_AdminGuide/bk_CiscoPrimeInfastructure_3_2_AdminGuide_chapter_0110.html#task_1144189