Cisco ISE rewrite

[Richard Lucht]

I would like to rewrite an identity mac address to parse out the - from xx-xx-xx-xx-xx-xx to a xxxxxxxxxxxx.  I am trying to use what an agency already built in AD to store MAC addresses instead of rebuilding and importing thousands of mac address.

[Francesco Molino]

Hi

I just want to understand first what you're trying to achieve.
You want to rewrite the identity of mac address by removing dashes before sending it to AD for authentication?

[Richard Lucht · Accepted solution]

I was able to find what I needed, I was trying to authenticate devices on to the network that are plugged into a Juniper switch.  The agency in question uses a windows radius server to authenticate the devices through mac address in AD.  I was trying to setup ISE to authenticate them using their AD.  After some tinkering and testing I was able to set up a policy set that would authenticate.  Their usernames at first were coming over with dashes and I needed them removed.  I reworked my protocols used and was able to fix my own issue.  Thanks though.

[Francesco Molino]

Ok good you find a way to solve your issue.

[mz_ccie18676]

Similar problem i was able to find this old post, what have you changed in ISE to send MAC address without dashes to AD. If i setup my MAC as user in AD inlcuding dashes it works, once i remove dashes it does not work. Ideally we want to use it without dashes. Thoughts?