cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1087
Views
5
Helpful
2
Replies

ISE NAS condition for port range

Hi,

 

I would like to know, is there anyway to create a authorization policy condition based on NAS port id range ?

 

Also i would like to know, whether the below condition will work ?

Capture.JPG

-Aravind
1 Accepted Solution

Accepted Solutions

Cory Peterson
Level 5
Level 5

That condition will not work, but is can be done with a regex "match" on the nas port id. I have done this and it worked well, but only used it during a pilot and would not recommend it as a common practice as it could become a nightmare to manage. 

 

This regex will match Gi 1-4 , 6 - 9 / 1 - 24:

 

GigabitEthernet[1-46-9]\/(1[0-9]|2[0-4]|[1-9])\b

Screenshot_6.png

 

View solution in original post

2 Replies 2

Cory Peterson
Level 5
Level 5

That condition will not work, but is can be done with a regex "match" on the nas port id. I have done this and it worked well, but only used it during a pilot and would not recommend it as a common practice as it could become a nightmare to manage. 

 

This regex will match Gi 1-4 , 6 - 9 / 1 - 24:

 

GigabitEthernet[1-46-9]\/(1[0-9]|2[0-4]|[1-9])\b

Screenshot_6.png

 

Thanks Cory for your suggestion :)

-Aravind