topic ISE 3.2 Patch API to update network device by name not working in Network Access Control

ISE 3.2 Patch API to update network device by name not working

rajgar — Wed, 28 Jun 2023 13:33:11 GMT

I am trying to update the network device location and type using the PATCH method for the ers/config/networkdevice/name/{name} API endpoint. Please see attached screenshot for details.

ISE Version:

3.2.0.542

Response below:

"ERSResponse": { "operation": "PATCH-patch by name-networkdevice", "messages": [ { "title": "Validation Error - Illegal values: [trustsecsettings: sgaNotificationAndUpdates: coaSourceHost must be a valid value of node type Standalone/PPAN/Policy with Session services]", "type": "ERROR", "code": "Application resource validation exception" } ],

Re: ISE 3.2 Patch API to update network device by name not working

hslai — Sun, 02 Jul 2023 14:25:15 GMT

@rajgar The error is about TrustSec settings so it appears that you had it configured but that caused validation error.

I tried one with RADIUS but no TrustSec settings and was able to update the groups. Here is my test input:

curl --include --insecure --location \ --header 'Content-Type:application/json' \ --header 'Accept: application/json' \ --user $ise_username:$ise_password \ --request PATCH https://$ise_hostname/ers/config/networkdevice/name/PATCH_Test \ --data ' { "NetworkDevice" : { "NetworkDeviceGroupList" : [ "Location#All Locations", "Device Type#All Device Types#TEST", "IPSEC#Is IPSEC Device#No", "Vendors#Vendors", "Deployment Phase#Deployment Phase#test"] } }'

Re: ISE 3.2 Patch API to update network device by name not working

rajgar — Mon, 03 Jul 2023 12:05:12 GMT

that makes sense. Appreciate sharing a working example.