cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
951
Views
2
Helpful
3
Replies

Does the ISE REST API allow access to the CLI

twgraham
Level 1
Level 1

We would like to automate maintenance commands (specifically the backup since the GUI-base backup scheduler doesn't work for us). Does the API have a PUT/POST to the command line interface?

Thanks.

1 Accepted Solution

Accepted Solutions

thomas
Cisco Employee
Cisco Employee

Please see Cisco Identity Services Engine API Reference Guide, Release 2.x - Cisco which lists the objects which can be manipulated via the APIs under External RESTful Services SDK.

Today the ISE APIs are meant for automation of Create/Read/Update/Delete of policy objects (users, endpoints, groups, network devices, SGTs, etc.) and not general maintenance operations.

View solution in original post

3 Replies 3

hslai
Cisco Employee
Cisco Employee

Please expand on why the GUI-base backup scheduler not working for you. Is there a TAC case open on this and identified  a bug?

ISE REST API is not managing ISE admin CLI. You might be able to use expect to interact with ISE admin CLI. However, it's best to sort it out why the backup scheduling not working at ISE admin web UI as it intended to be.

We have a TAC case open and have even attempted to repair. Supposedly CSCvc79739 and/or CSCuv95664. The repair made the upload smaller but the scheduled backup fails (well at least to date it has not succeed consistently).  One of the symptoms is the uploaded file is almost exactly 1GB or 2GB - not the real size of the backup.

.

ise backup size.PNG

There is a problem with the automation as I can make a backup from the CLI with no problem. 


That's a good idea about the EXPECT however - I have already written a python module to interact with Cisco routers and switches.  That might be simpler than doing the REST.  Thanks

thomas
Cisco Employee
Cisco Employee

Please see Cisco Identity Services Engine API Reference Guide, Release 2.x - Cisco which lists the objects which can be manipulated via the APIs under External RESTful Services SDK.

Today the ISE APIs are meant for automation of Create/Read/Update/Delete of policy objects (users, endpoints, groups, network devices, SGTs, etc.) and not general maintenance operations.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: