Cisco Can MAP Internal User + Mac Address for Policy ?

[jewfcb001]

Hi All ,

For Cisco ISE , Can configure policy for internal User + mac address ? I mean match user + mac in user attribute . 

Thank you.

[Mohammed al Baqari]

Hi,

Yes this is possible to match both conditions username and mac address.

**** please remember to rate useful posts

[jewfcb001]

@Mohammed al Baqari 

Thank you for answer. And I think If I would like to map User + MAC In User Profile . Can i do ?

[Mohammed al Baqari]

You can create custom conditions ANDing the username and MAC representing a
user profile. Then use this condition in your policy.

**** please remember to rate useful posts

[jewfcb001]

@Mohammed al Baqari  

Can you show me some configuration on ISE GUI ?

[Rob Ingram]

@jewfcb001 There are a couple of ways, but you can add the MAC address(es) into an endpoint identity group and reference the group name in an AuthZ rule and the username.

Use both conditions:

Internal User name EQUALS <the internal user>

IdentityGroupName EQUALS <Endpoint Group Name>

[jewfcb001]

@Rob Ingram 

Thank you for answer. But I would like to map User + MAC in User profile and use 2 attrribute do the policy . Can i do that?