Thanks Aditya.
This is a great suggestion however ideally we would want to use something that doesn't have an operational impact.
We use standardised interface configurations with the same access VLAN across our environment.
In order to stage changes, it would be ideal if for example we could tag multiple interfaces locally, and have ISE apply policy based on this.
Currently we use a match on network device and interface, but this gets complicated for more than a few interfaces.
So rather than:
IF switch X interface A OR switch X interface B OR switch Y interface A THEN test_policy
we use something like :
IF interface_tag THEN test_policy
Say we were testing a specific DACL, we wouldn't necessarily want to modify the access VLAN, as it wouldn't be representative of the final setup.
To me the requirement is similar to VLAN-ID based MAC authentication, in that we are sending information from the locally configured interface, just rather than VLAN ID it is another attribute, e.g. interface description.
Hopefully I've explained in a concise manner, but if you have questions please let me know.
Cheers.
