An administrator is configuring a new profiling policy within Cisco ISE. The organization has several endpoints that are the same device type and all have the same Block ID in their MAC address. The…

Question

Options

• AMAC_OUI_STARTSWITH_<MACADDRESS>
• BCDP_cdpCacheDevicelD_CONTAINS_<MACADDRESS>
• CMAC_MACAddress_CONTAINS_<MACADDRESS>
• DRadius Called Station-ID STARTSWITH <MACADDRESS>

• A
  76% (26)
• B
  12% (4)
• C
  3% (1)
• D
  9% (3)

Explanation

The OUI (Organizationally Unique Identifier) is the first three octets of a MAC address, assigned by IEEE to a specific manufacturer or vendor. The 'Block ID' in a MAC address refers to this OUI portion. When all devices of a given type share the same OUI, the correct profiling condition is MAC_OUI_STARTSWITH_<OUI_VALUE>, which matches any endpoint whose MAC address begins with that manufacturer prefix. This allows ISE to categorize all devices of that type into the custom profiling policy. The other options are either wrong attribute names (MAC_MACAddress_CONTAINS would match any substring), scoped to the wrong protocol attribute (CDP, RADIUS Called-Station-ID), or do not align with the OUI-based identification requirement.

No community discussion yet for this question.