Security

Reply
Occasional Contributor II
Posts: 15
Registered: ‎06-21-2016

Clearpass: Using custom attributes in profiles

[ Edited ]

Hi all,

 

i'm trying to use custom attributes, i have created for the entity "EndPoint" via "Administration>Dictionaries>Attributes". I want to use those attributes in profiles with CLI enforcments... a example would be, configuring a description via CLI enforcment for a switch port by extracting the defined custom attribut.

 

My question is, how to use an attribute named "My Description" in the profiels? i have tried %{Endpoint:My Description} with no success. No alert in Access Tracker and Application Response only shows "CLI:TargetDevice" but no commands.

 

Any ideas or hints?

 

Best Regrads

 

Guru Elite
Posts: 8,335
Registered: ‎09-08-2010

Re: Clearpass: Using custom attributes in profiles

That is the correct syntax. Do you have the Endpoints Repository as an
authorization source?

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Occasional Contributor II
Posts: 15
Registered: ‎06-21-2016

Re: Clearpass: Using custom attributes in profiles

[ Edited ]

Thank you @cappalli. Yes it was included - i think i have found my problem:

 

I configured the attribute with a default value in the attribute settings. If i updating the endpoints custom attributes, setting them to something other than default or just simply saving it, it seems to work?

Super Contributor II
Posts: 383
Registered: ‎09-05-2012

Re: Clearpass: Using custom attributes in profiles

I didn't even know this was possible. So cool!

 

Thanks for sharing.

 

Cheers

Search Airheads
Showing results for 
Search instead for 
Did you mean: