TACACS - unable to search for devices with ranges

[mmintz001]

We have migrated from Cisco ACS TACACS+ to Cisco ISE TACACS Device Administration. We were able to search for network devices within ranges on the old system but not with ISE. For example, in the old system if you had 10.10.10.7-10, you could search for 10.10.10.8 and find it. We cannot do this with the new system which is 2.3. Are we doing something wrong?

[yalbikaw]

you can filter on the ip/mask 

what is happening when you do this filter ?

[mmintz001]

Yes, you can filter to the first 3 octets of the ip address, but you cannot enter a specific ip address that falls within a range. If the range was .160-165, and you searched on .163, it would return no results. Since you do not know what the range that might have been entered, you have to filter by only the first 3 octets. The older system allowed you to enter an ip address that fell within the range and find it. We are just trying to find out if ISE does or does not allow this.

[yalbikaw · Accepted solution]

i tried with acs5.8 and ISE2.3 

it seems ISE doesn't accept it, unlike ACS.

you might need to open case if you really need this on your system.

[mmintz001 · Accepted solution]

Thanks - we'll look at opening a case.