When attempting to push conditions to ISE that contain an operators in the below list, an error is encountered (Invalid Attribute Value Match). Documentation doesn't list this as a supported choice, however, this has been supported in the ISE API SDK for some time now.
- macEquals
- macStartsWith
- macContains
Test Data:
ise:
network_access:
policy_elements:
conditions:
- name: Axis-MAC-Prefix
type: LibraryConditionOrBlock
is_negate: false
children:
- type: ConditionAttributes
is_negate: false
dictionary_name: Radius
attribute_name: Calling-Station-ID
operator: macStartsWith
dictionary_value: null
attribute_value: 00:40:8C
- type: ConditionAttributes
is_negate: false
dictionary_name: Radius
attribute_name: Calling-Station-ID
operator: macStartsWith
dictionary_value: null
attribute_value: AC:CC:8E
- type: ConditionAttributes
is_negate: false
dictionary_name: Radius
attribute_name: Calling-Station-ID
operator: macStartsWith
dictionary_value: null
attribute_value: B8:A4:4F