topic Re: ISE 2.3 ISE ERS assign parent attribute to un endpoint group in Network Access Control

ISE 2.3 ISE ERS assign parent attribute to un endpoint group

marco.merlo — Fri, 21 Feb 2020 18:44:40 GMT

Hi to all,

is there any way to create end endopointgroup and setting its parent group via ERS?

I was not able to find a reference to such an attribute in api documentation

If I create a group via ers and than look at it on ISE WEB INTERFACE I find it marked as "Parent Group".

I create from the GUI group A then group B setting A as it's parent. Indeed if I perform a get from both group by ERS in the response the information about parent and childe seem to miss

"resources": [
            {
                "id": "7e31c9c0-06cb-11e8-b462-00505692ee00",
                "name": "B",
                "description": "Group B, A's child",
                "link": {
                    "rel": "self",
                    "href": "https://ISEPAN:9060/ers/config/endpointgroup/7e31c9c0-06cb-11e8-b462-00505692ee00",
                    "type": "application/xml"

}

{
                "id": "bf43fd50-06c8-11e8-b462-00505692ee00",
                "name": "A",
                "description": "Parent group, B is its child",
                "link": {
                    "rel": "self",
                    "href": "https://ise-pan-cvl-1.ict.corp.rai.it:9060/ers/config/endpointgroup/bf43fd50-06c8-11e8-b462-00505692ee00",
                    "type": "application/xml"
                }
                }

Regards

Re: ISE 2.3 ISE ERS assign parent attribute to un endpoint group

R.e..g. — Wed, 18 Apr 2018 14:50:55 GMT

Hello Marco,

Were you able to find a solution to this? Also, do you know if it's possible to at least change the parent group after creation?

Re: ISE 2.3 ISE ERS assign parent attribute to un endpoint group

Antho_Balitrand — Wed, 25 Apr 2018 13:25:51 GMT

Hello ! I'm also interested to know if you have found a solution for this problem ?
Thanks 🙂

Re: ISE 2.3 ISE ERS assign parent attribute to un endpoint group

marco.merlo — Tue, 28 Aug 2018 08:01:40 GMT

Sorry for the delay, I spoke to a cisco engineer at last cisco live.

So far no solution for this issue.

Regards

Re: ISE 2.3 ISE ERS assign parent attribute to un endpoint group

sdfsefse — Tue, 14 May 2019 09:20:34 GMT

Hi guys,

I know it's May 2019, but anyone managed to solve this ? by ERS or CLI or ... anything ... 🙂

Thanks

Re: ISE 2.3 ISE ERS assign parent attribute to un endpoint group

marco.merlo — Tue, 21 May 2019 10:57:34 GMT

Hi.
nope. Someone at least filled a bug
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCva99795/?rfs=iqvred
This is a pity because ACStoISE migration tool is able to build structures of nested groups but without any kind of control ...
MM

Re: ISE 2.3 ISE ERS assign parent attribute to un endpoint group

GVD — Thu, 23 Apr 2020 14:51:08 GMT

Does anyone know if this has been addressed?

Re: ISE 2.3 ISE ERS assign parent attribute to un endpoint group

Antho_Balitrand — Fri, 26 Feb 2021 12:34:59 GMT

Hello,

Still not resolved in ISE 2.6 neither 2.7.

I'll test on 3.0 and let you know.