Cisco ISE API - ERS Endpoint - How to get its IP Address?

[ShuningWu14393]

Hi, 

Is there any way to get the IP address for an ERS endpoint? We only see the endpoint's name and MAC address (and interestingly, most of the time the name is the same as the MAC address), but the IP address is not listed. 

Thanks!

[Jason Kunst]

please check out - https://community.cisco.com/t5/security-documents/ise-ers-api-examples/ta-p/3622623#toc-hId--1994416749

The API guide is linked at http://cs.co/ise-api 

[ShuningWu14393]

Yes, we follow the API documentation, and here is one example we got from ERS Endpoint API:

{"ERSEndPoint": {"id": "739e1120-6aa0-11e7-975c-0050568339b5", "name": "00:00:00:00:00:00", "mac": "00:00:00:00:00:00", "profileId": "209fd4f0-5b38-11e5-8630-0050568339b5", "staticProfileAssignment": false, "groupId": "e6f21ea0-2617-11e7-9c01-0050568339b5", "staticGroupAssignment": true, "portalUser": "", "identityStore": "", "identityStoreId": "", "link": {"rel": "self", "href": "https://ise.cos.is.****.com:9060/ers/config/endpoint/739e1120-6aa0-11e7-975c-0050568339b5 ", "type": "application/json"}}}

As you can see, there is no IP address included in the API response. 

[Jason Kunst]

Right not all calls are going to have that check this https://developer.cisco.com/docs/identity-services-engine/#!end-point/resource-definition

[ShuningWu14393]

Thanks for the information! Looks like IP address is not listed in the documentation, is there any way to get this for the endpoints?

[ShuningWu14393 · Accepted solution]

We find the information from the monitoring API, for example,

curl -s -k --header 'Accept: application/xml' --user admin:C1sco12345 https://198.18.133.27/admin/API/mnt/AuthStatus/MACAddress/DE:AD:BE:EF:CA:FE/3600/100/All
 

[Jason Kunst]

also available through session topic using pxgrid 2.0. this is the preferred way to consume data. API is use for CRUD type control operations usually

https://developer.cisco.com/docs/pxgrid/#!learning-pxgrid

[ufbubba]

Is there any reason why the credentials that work for ERS would _not_ work for the admin/API curl command above?  When I try that query on my system, the returned msg suggests the credentials are not permitted. 

Thanks.

[TommyTao]

You need to get the monitoring node IP and grant MnT admin privilege to that account

https://developer.cisco.com/docs/identity-services-engine/3.0/#!introduction-to-monitoring-rest-apis/verifying-a-monitoring-node

[Charlie Moreton]

Resurrecting a 2-year old + thread that has an accepted solution limits the number of people that will take a look at it. The best thing to do is to start a new thread.