Using ERS API to create dACL

orp — Mon, 11 Jun 2018 07:17:59 GMT

Hi,

In ISE 2.4 it seems that it's possible to create dACLs using ERS. I couldn't find documentation for actually setting the rules in the dACL, e.g. permitting traffic for specific IPs, permit/deny, etc.

Can it be done? If so, what's the json format for that? If not, what's the purpose of this API?

Thanks

Re: Using ERS API to create dACL

thomas — Mon, 09 Jul 2018 19:45:44 GMT

The ACL format would need to match the ACL format of the network device.

So assuming an IOS switch:

curl --include --header 'Content-Type:application/json' --header 'Accept: application/json' --user admin:C1sco12345 --request POST https://1.2.3.4:9060/ers/config/downloadableacl --data '

{

"DownloadableAcl" : {

"name" : "ALLOW_ALL",

"description" : "Allow all.",

"dacl" : "

remark Allow All

permit ip any any

}

topic Re: Using ERS API to create dACL in Network Security

Using ERS API to create dACL

Re: Using ERS API to create dACL