topic Re: Nexus 9K REST API authentication using ISE in Network Access Control

Nexus 9K REST API authentication using ISE

martaylor — Fri, 13 Dec 2019 14:21:58 GMT

Hello

Can anyone help with a config issue I have.

A customer has requested REST API access onto their N9Ks using the role=nxdb-admin.

All access to the N9Ks is via TACACS using an ISE running 2.4

I have tried to setup a new TACACS profile on the ISE for Nexus devices with the role nxdb-admin however it never gets saved, i have tried setting it as optional or mandatory

Any advice on how to do this or what I am doing wrong or does it need a role on the ISE when accessing N9Ks using the rest API

Thanks

Martyn

Re: Nexus 9K REST API authentication using ISE

Colby LeMaire — Fri, 13 Dec 2019 17:17:38 GMT

You should be able to add the role as an AV pair in your shell profile. You could even just type it in on the "Raw View" screen within the shell profile configuration. It will let you save anything there. If you want it to contain the "=" sign, then it needs to be mandatory instead of optional. If that doesn't work on the Nexus itself, you may have to use roles="nxdb-admin".

Re: Nexus 9K REST API authentication using ISE

hslai — Sun, 15 Dec 2019 17:52:32 GMT

Colby.LeMaire is correct. However, you would need to switch the common task type to Generic.

(view in My Videos)