topic Maybe it has been renamed in Network Access Control

CISCO ISE API get client IP address

jay.pandya1 — Mon, 11 Mar 2019 06:23:33 GMT

I am using the CISCO ISE REST API and I want to be able to get the client IP address. I have been reading the Monitoring REST API documentation here: http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/api_ref_guide/api_ref_book/ise_api_ref_ch1.html

However the documentation only allows for querying by NAS IP address and not the client IP address. Is there any way to retrieve the client IP address via the API(s)?

Not sure exactly what it is

jan.nielsen — Thu, 14 Jan 2016 02:11:44 GMT

Not sure exactly what it is you want. Do you already have the ip, and want some more info from ise ? or do you have like a mac address and wan't the ip address ?

I already have the client IP,

jay.pandya1 — Thu, 14 Jan 2016 02:18:32 GMT

I already have the client IP, and I want some more information from ISE (such as username).

Not sure if it's just been

jan.nielsen — Thu, 14 Jan 2016 02:26:27 GMT

Not sure if it's just been removed from the documentation, but the session api in ise 1.1, had a call where you could use the ip address as condition, but it's not listed in the newer ise api docs, try it maybe ?

https://acme123/ise/mnt/api/Session/EndPointIPAddress/A.B.C.D

http://www.cisco.com/c/en/us/td/docs/security/ise/1-1/api_ref_guide/ise_api_reference_guide_book/ise_api_ref_ch2.html#pgfId-1089826

Nope, gives me a 404 Not

jay.pandya1 — Thu, 14 Jan 2016 02:37:58 GMT

Nope, gives me a 404 Not found 😞

NB: The ISE version we are using is 1.3.0.876.

Maybe it has been renamed

jay.pandya1 — Thu, 14 Jan 2016 02:52:14 GMT

The method you have suggested requires knowledge of the Endpoint IP, but the client could be connected to any endpoint in the network. I want to be able to find other information about the client based on their IP address. There is a NAS IP Search API call in newer versions, but again, that requires knowledge of a particular NAS IP.