Dictionary Attribute

Location in GUI: Work Centers » Network Access » Dictionaries » User » {Dictionary Name} » Dictionary Attributes

Diagram

Classes

policy_elements (ise.network_access)

Name	Type	Constraint	Mandatory	Default Value
dictionaries	List	[dictionaries]	No

dictionaries (ise.network_access.policy_elements)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[\w\d_\-\. ]+$	Yes
description	String		No
version	String		Yes
attribute_type	Choice	ENTITY_ATTR, MSG_ATTR, PIP_ATTR	No	ENTITY_ATTR
attributes	List	[attributes]	No

attributes (ise.network_access.policy_elements.dictionaries)

Name	Type	Constraint	Mandatory	Default Value
name	String		Yes
description	String		No
data_type	Choice	BOOLEAN, DATE, FLOAT, INT, IP, IPv4, IPv6, IPV6PREFIX, LONG, OCTET_STRING, STRING, UNIT32, UNIT64	Yes
direction_type	Choice	BOTH, IN, NONE, OUT	No	BOTH
internal_name	String		No

Examples

Example-1 Dictionary with a STRING Attribute

This example demonstrates a custom Cisco ISE network access dictionary with a single STRING attribute. The “CustomDict” dictionary includes a “Custom-Attr” attribute with bidirectional support for RADIUS message processing.

ise:
  network_access:
    policy_elements:
      dictionaries:
        - name: CustomDict
          description: Custom dictionary for additional attributes
          version: "1"
          attribute_type: MSG_ATTR
          attributes:
            - name: Custom-Attr
              description: My custom dictionary attribute
              data_type: STRING
              direction_type: BOTH
              internal_name: Custom-Attr

Example-2 Dictionary with Multiple Attributes of Different Types

This example demonstrates a custom dictionary with multiple attributes of varying data types. The “Custom_Vendor” dictionary includes STRING, INT, and BOOLEAN attributes, each with appropriate direction types for inbound-only or bidirectional RADIUS message processing.

ise:
  network_access:
    policy_elements:
      dictionaries:
        - name: Custom_Vendor
          description: Custom vendor-specific attributes
          version: "1"
          attribute_type: MSG_ATTR
          attributes:
            - name: Device-Model
              description: Model identifier of the connecting device
              data_type: STRING
              direction_type: IN
              internal_name: Device-Model
            - name: Session-Priority
              description: Priority level for the session
              data_type: INT
              direction_type: BOTH
              internal_name: Session-Priority
            - name: Is-Corporate-Device
              description: Whether the device is corporate-managed
              data_type: BOOLEAN
              direction_type: IN
              internal_name: Is-Corporate-Device