How to import bulk endpoints into identity group?

[getaway51]

Hi,

Normally i go to context visibility and edit. Then change the default identity grp to customize identity group. 

Is there a better or fastest way to do this? 

How can i import a bulk of endpoints tht i found during monitor mode to a customize identity grp? Normally wht are the best practices & procedures for 1) & 2)? 

1) check those endpoints mac tht fail

2) import into the identity grp 

[howon]

Yes, for handful of endpoints you can use context visibility, but for more that a dozen I would leverage import function. ISE profiling can help where it can give you hints on what the device profile is but in the end you will have to use your knowledge of the environment to determine which group to assign and provide policy.

[getaway51]

Hi

I am trying to ADD new Avaya VoIP Phone MAC address into Identity group Avaya-VoIP

May i know if import using the template, wht are the fields that shld ONLY fill in? I am thinking of MACaddress and IdentityGroupAssignment only.

Will the ISE  later change the device PolicyAssignment to Avaya-Device(this is the one detected by default if not added manually)? Does this really matter?

[hslai · Accepted solution]

For CSV import of endpoints, the first row should be, at minimal:

MACAddress,EndPointPolicy,IdentityGroup

If EndPointPolicy is blank, then it assumes dynamic profiling. If IdentityGroup is blank, then it assumes dynamic group. If either filled, then the filled field is statically assigned.