ISE 2.1 @ Authorization Condition

[csavas]

Hello,

I am using LDAP as a external identity source and trying to create a condition which maps an LDAP attribute to a RADIUS attribute.

I am trying to archive following condition:

LDAP-Attribute-A = Switch IP address (Type: Directory String)

LDAP-Attribute-B = NAS Port (Type: Directory String)

AUTHORIZATION CONDITION: 

          LDAP-Attribute-A = Radius:NAS-IP-Address

          LDAP-Attribute-B = Radius:NAS-Port

I am getting following error message: Please enter a valid expression for the condition.

Thanks in advance,

Cengiz

[hslai · Accepted solution]

It works for me when the data types matched between the right-hand-side (RHS) and the left-hand-side (LHS), such that Attribute A is IPv4 and B is INT.