ISE 3.3 - Authorization Profiles - Multiple PSKs

[Joseph897]

Hello,

I'd like to ask if is it possible to use multiple PSKs in a single authorization profile? This would be beneficial in case some devices like sensors in IOT ISE group require different PSK (reason e.g. requirement of sharing the PSK with vendor to hardcode it into sensor).

Attribute values:

Access Type = ACCESS_ACCEPT
cisco-av-pair = psk-mode=ascii
cisco-av-pair = psk=<PSK_value_1>
cisco-av-pair = psk=<PSK_value_2>

Thank You.

[balaji.bandi]

each group should have only 1 PSK, but in authorization you can call different groups.

[Joseph897]

I am not sure if I understand, so simply said we cannot use the authorization profiles with multiple PSKs. Meaning each authorization profile can have only 1 PSK.

If we want to combine/use different PSKs in single authorization policiy rule - we need to call different authorization profiles, is this correct statement?