Endpoint Identity Groups for iPSK

[Terence Lockette]

Hello all,

I have a simple question and hope there's a simple answer/solution to my question.  I was wondering if the configuration for iPSK with ISE can use an Endpoint IDG instead of individual MAC addresses for each client part of the iPSK policy set?

Thanks!

[packetplumber9 · Accepted solution]

yep, endpoint identity groups are usable in the conditions section of your iPSK policy.  I only use groups in my policies, even if it's a single device.  

[Terence Lockette]

Thanks!  I actually just tested it out prior to your reply and confirmed endpoint IDGs work for iPSK.  I like using groups as well because you never know when you'll be adding to it.  It makes your policy clean and simple.

Thanks again!