ISE 1.4 - Dynamic VLAN assingment based on originating NAD

[mattjenkins]

Hi all,

Been implementing ISE for a couple of weeks and so far so good with different authorization profiles with different VLANs being assigned.

Problem I have now if I have a set of devices which I have globally that I want to set the VLAN on but the VLAN is different in each location, is there a way to create a rule that says for example if its a 'Projector' and it originates from 'switch-1' set the VLAN to '10', but if it originates from 'switch-2' set the VLAN to '200'.

Is this possible? I would have thought this is something others have come across but my searching didn't find anything..

Cheers in advance!

[jan.nielsen · Accepted solution]

This is normally achieved by using the name of the vlan in your authorization profile instead of the vlan id, and then making sure your "projector" vlan, is named the same in all switches. The switch will then look in its local vlan database, to match the name to the local vlan id.

[mattjenkins]

Thanks Jan that's great