Endpoint

Location in GUI: Work Centers » Network Access » Identities » Endpoints

Diagram

Diagram

Classes

ise

Name	Type	Constraint	Mandatory	Default Value
identity_management	Class	identity_management	No

identity_management (ise)

Name	Type	Constraint	Mandatory	Default Value
endpoints	List	endpoints	No

endpoints (ise.identity_management)

Name	Type	Constraint	Mandatory	Default Value
mac	String	Regex: ^([0-9A-Fa-f]{2}:){5}([0-9A-Fa-f]{2})$	Yes
description	String		No
identity_store	String		No
identity_store_id	String		No
endpoint_identity_group	String		No
static_profile_assignment	Boolean	true, false	Yes
static_profile_assignment_defined	Boolean	true, false	No
static_group_assignment	Boolean	true, false	Yes
static_group_assignment_defined	Boolean	true, false	No
portal_user	String		No
profile_name	String		No
mdm_attributes	Class	mdm_attributes	No
custom_attributes	Map		No

endpoints (ise.identity_management)

Name	Type	Constraint	Mandatory	Default Value
mac	String	Regex: ^([0-9A-Fa-f]{2}:){5}([0-9A-Fa-f]{2})$	Yes
description	String		No
identity_store	String		No
identity_store_id	String		No
endpoint_identity_group	String		No
static_profile_assignment	Boolean	true, false	Yes
static_profile_assignment_defined	Boolean	true, false	No
static_group_assignment	Boolean	true, false	Yes
static_group_assignment_defined	Boolean	true, false	No
portal_user	String		No
profile_id	String		No
mdm_attributes	Class	mdm_attributes	No
custom_attributes	Map		No

mdm_attributes (ise.identity_management.endpoints)

Name	Type	Constraint	Mandatory	Default Value
compliance_status	Boolean	true, false	No
encrypted	Boolean	true, false	No
enrolled	Boolean	true, false	No
imei	String		No
jail_broken	Boolean	true, false	No
manufacturer	String		No
model	String		No
os	String		No
phone_number	String		No
pin_lock	Boolean	true, false	No
reachable	Boolean	true, false	No
serial	String		No
server_name	String		No

Examples

ise:
  identity_management:
    endpoints:
      - mac: FF:FF:FF:FF:FF:FF
        description: My endpoint
        endpoint_identity_group: Blocked List
        static_profile_assignment: false
        static_group_assignment: true

Statically assigning a profiling policy. When static_profile_assignment is true, set profile_name to the name of an existing profiling policy — it is resolved to the corresponding profile ID automatically.

ise:
  identity_management:
    endpoints:
      - mac: FF:FF:FF:FF:FF:FF
        description: My endpoint
        static_profile_assignment: true
        profile_name: Cisco-Device
        static_group_assignment: false

Assigning values for custom attributes. The keys must match the name of an endpoint_custom_attributes definition.

ise:
  identity_management:
    endpoint_custom_attributes:
      - name: isMobile
        type: Boolean
    endpoints:
      - mac: FF:FF:FF:FF:FF:FF
        description: My endpoint
        static_profile_assignment: false
        static_group_assignment: false
        custom_attributes:
          isMobile: "true"

Examples

ise:
  identity_management:
    endpoints:
      - mac: FF:FF:FF:FF:FF:FF
        description: My endpoint
        endpoint_identity_group: Blocked List
        static_profile_assignment: false
        static_group_assignment: true