topic PxGrid 'SXPBinding' topic provides only static binding in Network Access Control

PxGrid 'SXPBinding' topic provides only static binding

Parag Mahajan — Tue, 12 Jun 2018 18:43:49 GMT

Hi ,

I am Using the PxGrid latest Java SDK where we have found that SXPBinding and SessionSubscription give us different types of data.

1. 'SXPBinding' topic give us only Static SXP Bindings added into the ISE manually.

2. SGT assigned by ISE during authorization can be retrieved from 'SessionSubscribe' topic

Is this the Expected behavior ?

We are expecting that we should get all (static SGT and dynamic SGT )information form SXPBindings topicand not just the static binding.

Re: PxGrid 'SXPBinding' topic provides only static binding

Nidhi — Wed, 13 Jun 2018 06:54:45 GMT

Please check this discussion here which can provide some guidance. - Re: Publish SXP bindings on PxGrid

I am also checking with SME jeppich to provide inputs.

Thanks,

Nidhi

Re: PxGrid 'SXPBinding' topic provides only static binding

Parag Mahajan — Wed, 13 Jun 2018 18:37:16 GMT

Thanks Nidhi for reply. I have seen this post earlier but it did not answer question I am looking . Waiting for John to reply.

Re: PxGrid 'SXPBinding' topic provides only static binding

hslai — Sun, 17 Jun 2018 02:04:17 GMT

Correct. Those learned from ISE session directory should also publish through this pxGrid topic.

If you are seeing this in your lab, please share the setup info.

John is correct. This appears changed around ISE 2.1:

Session bindings are available in session_subscribe. So the decision was made that sxp_subscribe only gets those local static bindings.

Re: PxGrid 'SXPBinding' topic provides only static binding

jeppich — Mon, 25 Jun 2018 01:22:45 GMT

Hey Parag,

With regards to question #1, the answer is yes, devices must be statically defined,

with regards to question#2, the answer is yes,

with regard to "We are expecting that we should get all (static SGT and dynamic SGT )information form SXPBindings topicand not just the static binding", you can also subscribe to the TrustSecMetaData Topic, this will give you the securitygroup id:, tag name, description, and tag number.

pxGrid v2 (available in ISE 2.4+) provides additional trustsec topics or services: https://github.com/cisco-pxgrid/pxgrid-rest-ws/wiki there is no longer TrustsecMetadataTopic. To learn more about pxGrid 2.0, please see:https://developer.cisco.com/site/pxgrid/ , and select pxGrid 2.0,

Also wrapping up a pxGrid 2.0 TDM deck, unicast me your email address and i will send out to you when completed. Also, send me an email with what you are trying to accomplish.

Thanks,

John

jeppich@cisco.com