topic Cisco ISE API - ERS Endpoint - How to get its IP Address? in Network Access Control

Cisco ISE API - ERS Endpoint - How to get its IP Address?

ShuningWu14393 — Thu, 12 Nov 2020 23:46:30 GMT

Hi,

Is there any way to get the IP address for an ERS endpoint? We only see the endpoint's name and MAC address (and interestingly, most of the time the name is the same as the MAC address), but the IP address is not listed.

Thanks!

Re: Cisco ISE API - ERS Endpoint - How to get its IP Address?

Jason Kunst — Fri, 13 Nov 2020 00:38:33 GMT

please check out - https://community.cisco.com/t5/security-documents/ise-ers-api-examples/ta-p/3622623#toc-hId--1994416749

The API guide is linked at http://cs.co/ise-api

Re: Cisco ISE API - ERS Endpoint - How to get its IP Address?

ShuningWu14393 — Fri, 13 Nov 2020 00:52:54 GMT

Yes, we follow the API documentation, and here is one example we got from ERS Endpoint API:

{"ERSEndPoint": {"id": "739e1120-6aa0-11e7-975c-0050568339b5", "name": "00:00:00:00:00:00", "mac": "00:00:00:00:00:00", "profileId": "209fd4f0-5b38-11e5-8630-0050568339b5", "staticProfileAssignment": false, "groupId": "e6f21ea0-2617-11e7-9c01-0050568339b5", "staticGroupAssignment": true, "portalUser": "", "identityStore": "", "identityStoreId": "", "link": {"rel": "self", "href": "https://ise.cos.is.****.com:9060/ers/config/endpoint/739e1120-6aa0-11e7-975c-0050568339b5 ", "type": "application/json"}}}

As you can see, there is no IP address included in the API response.

Re: Cisco ISE API - ERS Endpoint - How to get its IP Address?

Jason Kunst — Fri, 13 Nov 2020 01:52:42 GMT

Right not all calls are going to have that check this https://developer.cisco.com/docs/identity-services-engine/#!end-point/resource-definition

Re: Cisco ISE API - ERS Endpoint - How to get its IP Address?

ShuningWu14393 — Fri, 13 Nov 2020 03:32:14 GMT

Thanks for the information! Looks like IP address is not listed in the documentation, is there any way to get this for the endpoints?

Re: Cisco ISE API - ERS Endpoint - How to get its IP Address?

ShuningWu14393 — Fri, 13 Nov 2020 17:53:28 GMT

We find the information from the monitoring API, for example,

curl -s -k --header 'Accept: application/xml' --user admin:C1sco12345 https://198.18.133.27/admin/API/mnt/AuthStatus/MACAddress/DE:AD:BE:EF:CA:FE/3600/100/All

Re: Cisco ISE API - ERS Endpoint - How to get its IP Address?

Jason Kunst — Fri, 13 Nov 2020 19:28:45 GMT

also available through session topic using pxgrid 2.0. this is the preferred way to consume data. API is use for CRUD type control operations usually

https://developer.cisco.com/docs/pxgrid/#!learning-pxgrid

Re: Cisco ISE API - ERS Endpoint - How to get its IP Address?

ufbubba — Fri, 12 May 2023 19:54:29 GMT

Is there any reason why the credentials that work for ERS would _not_ work for the admin/API curl command above? When I try that query on my system, the returned msg suggests the credentials are not permitted.

Thanks.

Re: Cisco ISE API - ERS Endpoint - How to get its IP Address?

TommyTao — Wed, 29 Nov 2023 08:40:59 GMT

You need to get the monitoring node IP and grant MnT admin privilege to that account

https://developer.cisco.com/docs/identity-services-engine/3.0/#!introduction-to-monitoring-rest-apis/verifying-a-monitoring-node

Re: Cisco ISE API - ERS Endpoint - How to get its IP Address?

Charlie Moreton — Wed, 29 Nov 2023 13:49:32 GMT

Resurrecting a 2-year old + thread that has an accepted solution limits the number of people that will take a look at it. The best thing to do is to start a new thread.