how to add range of MAC address in identity group.

[Athaullah]

Dears,

I have requirement that I need to add range of mac address to an identity group in ISE. Please let me know if you find any solution for this request.

for example:

From : D0:f7:d8:a1:01  to D0:f7:d8:af:ff

Thanks.

[Arne Bier · Accepted solution]

Identity Groups can only contain endpoints represented as a complete MAC address. If you have an Authorization Rule that is based on a range of MAC addresses then there are other options  - e.g.

- if the prefix can be specified: such as Calling-Station-ID STARTS WITH D0:f7:d8:a

- Or use regular expression using the MATCHES operator

You can test regular expression syntax on regex101.com

[thomas]

See ISE ERS API Examples >

• Create an Endpoint Group and Assign an Endpoint
• Create Endpoint Group
• Create Endpoint

Then write a for-loop for d0:f7:d8:a1:01:00 to d0:f7:d8:af:ff:ff.