Automatic NAD identity group attibute based

[TVmaster]

hi fellows 

can anyone tell me if ise can get some attribute to place nad inside some Identity group automatically?

i have ten different cisco switches  models in my campus , and i want to create different policies based on switch model, but automatically , without having to put my swiches in an identity group manually .

[Jason Kunst · Accepted solution]

No I don't think so, you have to manually add each switch and put it in the respective NDG to identify its hierarchy

[howon]

Since these are Cisco switches you can customize NAS-ID attribute to reflect switch model and use it in the ISE policy. Please check out 'Differentiating specific network device' section of the following document for more information:

https://community.cisco.com/t5/security-documents/advanced-ise-tips-to-make-your-deployment-easier/ta-p/3850189#toc-hId--574335339