topic Re: ISE2.2: API question in Network Access Control

ISE2.2: API question

naogawa — Tue, 27 Jun 2017 08:04:42 GMT

I want to know about API to get mac address, username and current IP Address of endpoints.

I have reviewed the ERS document, but I have not found the API to get "current IP Address of endpoints"

Could you any one help me?

Re: ISE2.2: API question

ldanny — Tue, 27 Jun 2017 08:44:20 GMT

This post should be helpful

ISE ERS API Examples

Danny

Re: ISE2.2: API question

vibobrov — Wed, 28 Jun 2017 19:13:10 GMT

The examples don't show an IP address returned.

You can also utilize MNT API calls to look up session data including MAC, Username, IP along with other session information.

http://www.cisco.com/c/en/us/td/docs/security/ise/2-0/api_ref_guide/api_ref_book/ise_api_ref_ch2.html#pgfId-1071773

Re: ISE2.2: API question

kthiruve — Wed, 28 Jun 2017 20:40:09 GMT

AAA accounting needs to be turned on in the Network device to gather Endpoint IP address. You can also turn on Framed-IP-address Radius attribute 8 to be sent to ISE since the API uses that. This is used to gather IP address information before the authentication.