topic Batch / script interface to cisco ise in Network Access Control

Batch / script interface to cisco ise

Lance Wendel — Mon, 11 Mar 2019 04:25:54 GMT

I have here a request from our customer in the client deployment. Looking for a way

MAC addresses are pass through a programm whihc could then pass through to Cisco ISE.

customer is looking for a document where the ISE interfaces are discussed.

The aim should be an automated way to create and delete entries without having to use the GUI.

For other manufacturers for an example they used SDK (Software Deployment Toolkit)for this purpose or a web service used.

Is there documentation or working scripts that can solve this problem?

with kind regards,

Lance

Batch / script interface to cisco ise

Charlie Moreton — Fri, 21 Feb 2014 18:47:15 GMT

ISE 1.2 uses REST API to interface. You can use this to extract the MAC Address of clients. There is a configuration guide avaiable here:

http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/api_ref_guide/api_ref_book.html

Here is the specific section on endpoint MAC Addresses:

http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/api_ref_guide/api_ref_book/ise_api_ref_ers1.html#wp1101031

Please Rate Helpful posts and mark this question as answered if, in fact, this does answer your question. Otherwise, feel free to post follow-up questions.

Charles Moreton