topic Re: Cisco ISE API - ERS Endpoint - How to get its AuthorizationProfile ID? in Network Access Control

Cisco ISE API - ERS Endpoint - How to get its AuthorizationProfile ID?

ShuningWu14393 — Thu, 12 Nov 2020 18:34:45 GMT

Hi,

We try to get the AuthorizationProfile ID for ERS endpoint through Cisco ISE API, but we can't find the linkage between endpoint and authorization profile. The profileId listed in ERSEndpoint seems to be the "Profiler" profile ID, not the authorization profile ID we need.

Any help would be appreciated.

Thanks!

Re: Cisco ISE API - ERS Endpoint - How to get its AuthorizationProfile ID?

martin.fischer — Fri, 13 Nov 2020 11:20:38 GMT

Hi @ShuningWu14393

I'm not sure whether I understand your question correctly, but you can use the following call to see which authorization profiles got applied to a session:

https://{mnt-host}/admin/API/mnt/AuthStatus/MACAddress/{mac}/{seconds}/{logcount}/All

In the response you should see the applied authorization profiles: <selected_azn_profiles>value</selected_azn_profiles>

Re: Cisco ISE API - ERS Endpoint - How to get its AuthorizationProfile ID?

ShuningWu14393 — Fri, 13 Nov 2020 16:03:43 GMT

Thanks! Basically what I want to get is something like this:

For an ERS endpoint, get its

Mac Address
IP Address
Authorization Profile ID

Re: Cisco ISE API - ERS Endpoint - How to get its AuthorizationProfile ID?

ShuningWu14393 — Fri, 13 Nov 2020 17:52:32 GMT

Yes, We find the information from this monitoring API, thanks much!!!!

By the way, this is the curl command we found from another post, and it helps too:

curl -s -k --header 'Accept: application/xml' --user admin:C1sco12345 https://198.18.133.27/admin/API/mnt/AuthStatus/MACAddress/DE:AD:BE:EF:CA:FE/3600/100/All

Re: Cisco ISE API - ERS Endpoint - How to get its AuthorizationProfile ID?

ShuningWu14393 — Mon, 16 Nov 2020 15:54:00 GMT

We see another issue today, there are over 90000 endpoints from ERS endpoint API, but we only find about 3000 profile records from AuthStatus, does this mean that only 3000 endpoints are active and authorized?

Re: Cisco ISE API - ERS Endpoint - How to get its AuthorizationProfile

ak698w — Tue, 21 Jun 2022 16:10:39 GMT

I've run this API command and it has returned many records, only a few have <selected_azn_profiles> value for a given mac address. Is there a way to make this more consistent?