Hi,
I am in the process of migrating the rules from an ACS to the ISE. On the ACS several results are evaluated in one rule.
First result:
DACL = InternalUser:DACL
Class = InternalUser:VPN-Group
Framed-IP-Address = InternalUser:Assigned-IP-Address
If one or more fields are empty, the empty fields should be filled from another result.
DACL is empty
DACL = PERMIT_USER_ACL
If DACL or Framed-IP-Address are empty, these fields will be filled from the other result. This does not work for the Class field.
Does anyone have an idea how to get this done?
I am using ISE 2.4 Patch 9
Thanks a lot
Sebastian
