Cisco av-pair ClientMacValue

[TebogoMandyu]

Hi everyone.

I'm working on a project to setup captive network. Therefore, for a user to connect, we redirect them to a login page where the url-redirect=https://example.com/login.html?client_mac=<<user's client mac address>>

On the url-redirect config, the variable that holds the user's client mac address is called ClientMacValue. For example, the url-redirect construct is https://example.com/login.html?client_mac=ClientMacValue.

I want to find out where the variable ClientMacValue is defined on ISE. I can't seem to find it.

[Rodrigo Diaz]

Hi @TebogoMandyu , 

The MAC address of the supplicant for EAP/MAB authentication on ISE will be displayed as Calling Station Id, you can use that  Cisco AV pair attribute. 

For your reference RADIUS Attributes 

Let me know if that helped you. 

[TebogoMandyu]

Hi @Rodrigo Diaz. Where is the attribute defined? We would like to pass some additional attributes (PSN name) on the url. At the moment we are hardcoding the psn name. Instead of hardcoding the psn name, we want to create a dynamic attribute with the list of PSNs and use that dynamic attribute in the url, similar to how we use the ClientMacValue attribute.

[Rodrigo Diaz]

You can review that the Calling Station Id attribute is defined as the MAC address of the supplicant ,in the livelogs for EAP/MAB  you can  review that in your own implementation, for further information related kindly review to the link i posted earlier. In relationship to the rest of the statement, what you would like is to redirect the traffic to PSNs using a customized FQDN ? 

[TebogoMandyu]

Yes, but by adding the PSNs to a dynamic attribute instead of defining a policy that will have a PSN on the url-redirect for each PSN in our environment