cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4215
Views
0
Helpful
3
Replies

How to import bulk endpoints into identity group?

getaway51
Level 2
Level 2

Hi,

Normally i go to context visibility and edit. Then change the default identity grp to customize identity group. 

 

Is there a better or fastest way to do this? 

How can i import a bulk of endpoints tht i found during monitor mode to a customize identity grp? Normally wht are the best practices & procedures for 1) & 2)? 

1) check those endpoints mac tht fail

2) import into the identity grp 

1 Accepted Solution

Accepted Solutions

For CSV import of endpoints, the first row should be, at minimal:

MACAddress,EndPointPolicy,IdentityGroup

 

If EndPointPolicy is blank, then it assumes dynamic profiling. If IdentityGroup is blank, then it assumes dynamic group. If either filled, then the filled field is statically assigned.

View solution in original post

3 Replies 3

howon
Cisco Employee
Cisco Employee

Yes, for handful of endpoints you can use context visibility, but for more that a dozen I would leverage import function. ISE profiling can help where it can give you hints on what the device profile is but in the end you will have to use your knowledge of the environment to determine which group to assign and provide policy.

Hi

 

I am trying to ADD new Avaya VoIP Phone MAC address into Identity group Avaya-VoIP

May i know if import using the template, wht are the fields that shld ONLY fill in? I am thinking of MACaddress and IdentityGroupAssignment only.

Will the ISE  later change the device PolicyAssignment to Avaya-Device(this is the one detected by default if not added manually)? Does this really matter?

For CSV import of endpoints, the first row should be, at minimal:

MACAddress,EndPointPolicy,IdentityGroup

 

If EndPointPolicy is blank, then it assumes dynamic profiling. If IdentityGroup is blank, then it assumes dynamic group. If either filled, then the filled field is statically assigned.