topic ISE 3.2 ANC API, Multiple MAC addresses at once. in Network Access Control

ISE 3.2 ANC API, Multiple MAC addresses at once.

brandondmoore1 — Thu, 16 Nov 2023 13:18:18 GMT

Below is the ISE 3.2 json call to apply a mac address to an ANC policy. Is it possible to quarantine multiple mac addresses to the same policy in a single call? We have a use case for that.

{

"OperationAdditionalData" : {

"additionalData" : [ {

"name" : "macAddress",

"value" : "00:50:5A:AA:8A:4A"

{

"name" : "policyName",

"value" : "QUARANTINE"

}]

}

Re: ISE 3.2 ANC API, Multiple MAC addresses at once.

Mark Elsen — Thu, 16 Nov 2023 14:32:36 GMT

- Could you try (an example for two mac addresses)

{
"OperationAdditionalData": {
"additionalData": [
{
"name": "macAddress",
"value": "00:50:5A:AA:8A:4A"
},
{
"name": "macAddress",
"value": "00:50:5A:BB:BB:BB"
},
{
"name": "policyName",
"value": "QUARANTINE"
}
]
}
}

Re: ISE 3.2 ANC API, Multiple MAC addresses at once.

brandondmoore1 — Thu, 16 Nov 2023 16:08:55 GMT

No, for whatever reason it only accepts the second one. Just ignores the first one.

Re: ISE 3.2 ANC API, Multiple MAC addresses at once.

Greg Gibbs — Thu, 16 Nov 2023 21:30:08 GMT

I assume you're using the PUT request for the '/ers/config/ancendpoint/apply' API endpoint? If so, that only supports a single endpoint.

To apply the policy to multiple endpoints in a single call, you would need to use the '/ers/config/ancendpoint/bulk/submit' API endpoint for a bulk request with an XML input.
https://developer.cisco.com/docs/identity-services-engine/latest/#!ancendpoint

See this example for how to use a bulk operation:
https://developer.cisco.com/docs/identity-services-engine/3.0/#!bulk-operations/sending-bulk-request

Re: ISE 3.2 ANC API, Multiple MAC addresses at once.

brandondmoore1 — Thu, 16 Nov 2023 22:03:16 GMT

Ohh, you are right. I completely forgot about the bulk request. Thank you for the reminder.