ISE 3.2 Patch API to update network device by name not working

[rajgar]

I am trying to update the network device location and type using the PATCH method for the ers/config/networkdevice/name/{name} API endpoint. Please see attached screenshot for details. 

ISE Version:

3.2.0.542

Response below:

    "ERSResponse": {
        "operation": "PATCH-patch by name-networkdevice",
        "messages": [
            {
                "title": "Validation Error - Illegal values: [trustsecsettings: sgaNotificationAndUpdates: coaSourceHost must be a valid value of node type Standalone/PPAN/Policy with Session services]",
                "type": "ERROR",
                "code": "Application resource validation exception"
            }
        ],

[hslai · Accepted solution]

@rajgar The error is about TrustSec settings so it appears that you had it configured but that caused validation error.

I tried one with RADIUS but no TrustSec settings and was able to update the groups. Here is my test input:

curl  --include  --insecure  --location \
--header 'Content-Type:application/json' \
--header 'Accept: application/json' \
--user $ise_username:$ise_password \
--request PATCH https://$ise_hostname/ers/config/networkdevice/name/PATCH_Test \
--data '
{
  "NetworkDevice" : {
	"NetworkDeviceGroupList" : [
	  "Location#All Locations",
	  "Device Type#All Device Types#TEST",
	  "IPSEC#Is IPSEC Device#No",
	  "Vendors#Vendors",
	  "Deployment Phase#Deployment Phase#test"]
  }
}'

[rajgar]

that makes sense. Appreciate sharing a working example.