Question

A network administrator has a spreadsheet listing 200 MAC addresses for corporate IoT sensors that should be granted network access via MAB. These devices do not respond well to active probing and must be manually managed. The administrator wants to bulk-add all of these endpoints into ISE and place them into a specific endpoint identity group so an authorization policy can match them. What is the most efficient way to accomplish this in Cisco ISE?

Accepted Answer

Import the endpoints using a CSV file from Context Visibility > Endpoints (or Administration > Identity Management > Identities > Endpoints), specifying the identity group in the import file

Answer

Enable the RADIUS and SNMP probes so the sensors are automatically discovered and dynamically assigned to the identity group

Answer

Create a logical profile containing the 200 MAC addresses and reference it directly in the authorization policy

Answer

Add each MAC address as a separate internal user account under Administration > Identity Management > Identities > Users