topic Re: Cramer to ISE integration in Network Access Control

Cramer to ISE integration

Pinky Gowda — Mon, 08 Jun 2020 06:48:39 GMT

Hi Team,

We would like to check the capability within Cisco ISE to consume an external API (through JMS or webservice).

We want to replace the existing push mechanism (from Cramer to ACS) with a pull mechanism (ISE pulls from Cramer through a batch process).

The existing perl (batch process) running on the Cramer, pushes requests for addition, modification or deletion of a node/device into the ACS. Expectation is to have the same information persisted in a queue, which ISE is able to pull from.

Please help us if there is a possibility to do it.

Re: Cramer to ISE integration

thomas — Mon, 08 Jun 2020 17:55:15 GMT

Never heard of Cramer or know what the technology is but it sounds like you want integration with ISE via REST APIs.

ISE does not run scripts or batches - you will need to update ISE as you did with ACS.

You do not state which objects / resources you want to add/update/delete.

See all available objects within ISE @ http://cs.co/ise-api and review ISE ERS API Examples.

Alternatively, if you want ISE to query Cramer via LDAP or ODBC, ISE supports that:

LDAP Servers
SunONE LDAP Directory Server	Version 5.2
OpenLDAP Directory Server	Version 2.4.23
Any LDAP v3 compliant server	—
Open Database Connectivity (ODBC) Identity Source
Microsoft SQL Server	Microsoft SQL Server 2012
Oracle	Enterprise Edition Release 12.1.0.2.0
PostgreSQL	9.0
Sybase	16.0
MySQL	6.3

Re: Cramer to ISE integration

Pinky Gowda — Tue, 09 Jun 2020 07:51:09 GMT

Cramer is an inventory tool that is used by one of our telecom customer to reterive the details of the network devices.

Currently customer has Cisco ACS which will be migrated to Cisco ISE so all the devices that was integrated with ACS needs to integrated with ISE. Currently Cramer is pushing messages to ACS while the ISE integration would require pull from it.

Would it be possible to achieve the same

Re: Cramer to ISE integration

Pinky Gowda — Tue, 09 Jun 2020 07:53:25 GMT

Cramer is an inventory tool that is used by one of our telecom customer to reterive the details of the network devices.

Currently customer has Cisco ACS which will be migrated to Cisco ISE so all the devices that was integrated with ACS needs to integrated with ISE. Currently Cramer is pushing messages to ACS while the ISE integration would require pull from it.

Would it be possible to achieve the same

Re: Cramer to ISE integration

saxenanitesh8522 — Tue, 09 Jun 2020 12:21:44 GMT

How is Cramer integrated ?

you can always do API support for push or pull data which is required

https://community.cisco.com/t5/network-access-control/ise-ers-api-calls-to-get-all-the-network-devices-with-group/m-p/3452688

it has the pull mechanism to get the data.

Re: Cramer to ISE integration

thomas — Tue, 09 Jun 2020 14:30:52 GMT

Yes, you may achieve the same - have Cramer push updates into ISE like it does for ACS today using REST APIs as explained above.