topic Re: Bulk delete of network devices in ISE 2.4 in Network Access Control

Bulk delete of network devices in ISE 2.4

cnegrete — Wed, 21 Nov 2018 17:27:04 GMT

Hi everyone.

I'm banging my head against the wall with this one.

I'm trying to find the best way to do a bulk delete (it's in reality a hostname change) and then add several (hundreds) of devices at a time.

The last thing I tried was to move the devices to a specific "Location" (with the import tool, of course), then search for them in ISE and delete them (and I ended up finding an inconsistency in the ISE UI in which "Export All" exports the filtered devices whereas "Delete All" deletes THE ENTIRE DATABASE - but that's not the question), but having to check the hundreds of checkboxes to use the "Delete Selected" option is impractical.

So, what is to be done here?

* Just change the hostname on the .csv import file doesn't work, it barks about the IP address already in use by the "original" device

* Deleting the individual devices is impractical as there's no "Select All" option to select all the filtered devices, and "Delete All" stupidly deletes everything.

Is there a practical option to do this?

Thanks for your time.

Re: Bulk delete of network devices in ISE 2.4

pan — Thu, 22 Nov 2018 16:21:28 GMT

Please try this:

Use External restful service:

Below curl query will get all network device's ID.

curl --insecure --user username:password -X GET \
https://<PAN node ip address>:9060/ers/config/networkdevice \
-H 'Accept: application/xml' \
-H 'Content-Type: application/xml' \

-H 'X-CSRF-TOKEN: fetch' \
-H 'cache-control: no-cache'

Below query will delete the endpoint:

curl --insecure --user username:password -X DELETE \
https://<PAN node ip address>:9060/ers/config/networkdevice/<replace with id you got from above query> \
-H 'Accept: application/xml' \
-H 'Content-Type: application/xml' \
-H 'X-CSRF-TOKEN: fetch' \
-H 'cache-control: no-cache'

Note you need to replace text highlighted in red

The username and password you have to user should have proper permission. Please check below screenshot:

Hope this reduces your efforts

Re: Bulk delete of network devices in ISE 2.4

cnegrete — Thu, 22 Nov 2018 18:50:24 GMT

Excellent. I can go from here.
It's a shame you can't just use a file to bulk delete on ISE.
Thanks!!

Re: Bulk delete of network devices in ISE 2.4

Jason Kunst — Mon, 26 Nov 2018 20:23:29 GMT

Please do send feedback through the mechanism built into the menu of ISE