Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

ISE - NDG by location

Dears

i created policy based on devices location and i have location groups as below

.

• Company-> Branch1

• Company-> Branch2

when i choose Branch1 or Branch2 as my location Attribute in authorization policy the policies work fine and get matched but when i use "Company" as a location the policy never get matched even if this the only policy exists and the default policy get matched  , so does this mean i can't use the parent group?

1 ACCEPTED SOLUTION

Accepted Solutions

ISE - NDG by location

You can use the parent group, but you have to choose "CONTAIN" instead of "EQUALS". I have done that without issue.

Please rate if it's helpful.

3 REPLIES

ISE - NDG by location

You can use the parent group, but you have to choose "CONTAIN" instead of "EQUALS". I have done that without issue.

Please rate if it's helpful.

Community Member

ISE - NDG by location

thanks eduardoaliaga , in 1.1.4 "contains " doesn't exist but i used "starts with" and worked fine

ISE - NDG by location

Yes you're right, It's "STARTS WITH", apologize for the confusion, but glad you got the right answer

359
Views
0
Helpful
3
Replies
CreatePlease to create content