ISE v2.2 radius authentication and authorization with local users

[alfonso.cornejo]

Hi,

I'm working with an ISE v2.2 as a radius server in order to authenticate connection for a remote access vpn from an ASA only with local users (no AD integration), I want this policy to match exactly the User Identity Group "VPN-USERS" that I've configured for those users but I'm not able to find in the Policy Configuration section any of the User Identity Groups that I manually have configured in my ISE.

User Identity Group:

I can't locate it in the Identity Source List from the Authentication section:

And I also can't locate it in the Authorization section, when I choose the IdentityGroup:Name value and the equals option, in the next part I can't find any Identity Group:

Any ideas?

Thanks in advanced.

[Rahul Govindan · Accepted solution]

I think you should be looking under the first Condition box after Rule Name (in Authz Policy). Any identity group (user or endpoint) is usually under there.

[alfonso.cornejo]

Thanks alot!, there was the option and it is working.