ISE 3.2 ANC API, Multiple MAC addresses at once.

[brandondmoore1]

Below is the ISE 3.2 json call to apply a mac address to an ANC policy. Is it possible to quarantine multiple mac addresses to the same policy in a single call? We have a use case for that. 

{

"OperationAdditionalData" : {

"additionalData" : [ {

"name" : "macAddress",

"value" : "00:50:5A:AA:8A:4A"

},

{

"name" : "policyName",

"value" : "QUARANTINE"

}]

}

}

[Mark Elsen]

 - Could you try  (an example for two mac addresses)

{
"OperationAdditionalData": {
"additionalData": [
{
"name": "macAddress",
"value": "00:50:5A:AA:8A:4A"
},
{
"name": "macAddress",
"value": "00:50:5A:BB:BB:BB"
},
{
"name": "policyName",
"value": "QUARANTINE"
}
]
}
}

 M.

[brandondmoore1]

No, for whatever reason it only accepts the second one. Just ignores the first one. 

[Greg Gibbs · Accepted solution]

I assume you're using the PUT request for the '/ers/config/ancendpoint/apply' API endpoint? If so, that only supports a single endpoint.

To apply the policy to multiple endpoints in a single call, you would need to use the '/ers/config/ancendpoint/bulk/submit' API endpoint for a bulk request with an XML input.
https://developer.cisco.com/docs/identity-services-engine/latest/#!ancendpoint

See this example for how to use a bulk operation:
https://developer.cisco.com/docs/identity-services-engine/3.0/#!bulk-operations/sending-bulk-request

[brandondmoore1]

Ohh, you are right. I completely forgot about the bulk request. Thank you for the reminder.