topic Re: Does the ISE REST API allow access to the CLI in Network Access Control

Does the ISE REST API allow access to the CLI

twgraham — Fri, 21 Jul 2017 14:01:02 GMT

We would like to automate maintenance commands (specifically the backup since the GUI-base backup scheduler doesn't work for us). Does the API have a PUT/POST to the command line interface?

Thanks.

Re: Does the ISE REST API allow access to the CLI

hslai — Fri, 21 Jul 2017 16:39:50 GMT

Please expand on why the GUI-base backup scheduler not working for you. Is there a TAC case open on this and identified a bug?

ISE REST API is not managing ISE admin CLI. You might be able to use expect to interact with ISE admin CLI. However, it's best to sort it out why the backup scheduling not working at ISE admin web UI as it intended to be.

Re: Does the ISE REST API allow access to the CLI

thomas — Fri, 21 Jul 2017 16:46:44 GMT

Please see Cisco Identity Services Engine API Reference Guide, Release 2.x - Cisco which lists the objects which can be manipulated via the APIs under External RESTful Services SDK.

Today the ISE APIs are meant for automation of Create/Read/Update/Delete of policy objects (users, endpoints, groups, network devices, SGTs, etc.) and not general maintenance operations.

Re: Does the ISE REST API allow access to the CLI

twgraham — Fri, 21 Jul 2017 17:55:19 GMT

We have a TAC case open and have even attempted to repair. Supposedly CSCvc79739 and/or CSCuv95664. The repair made the upload smaller but the scheduled backup fails (well at least to date it has not succeed consistently). One of the symptoms is the uploaded file is almost exactly 1GB or 2GB - not the real size of the backup.

There is a problem with the automation as I can make a backup from the CLI with no problem.

That's a good idea about the EXPECT however - I have already written a python module to interact with Cisco routers and switches. That might be simpler than doing the REST. Thanks