PxGrid 'SXPBinding' topic provides only static binding

[Parag Mahajan]

Hi ,

I am Using the PxGrid latest Java SDK where we have found that SXPBinding and SessionSubscription give us different types of data.

1. 'SXPBinding' topic give us only Static SXP Bindings added into the ISE manually.

2. SGT assigned by ISE during authorization can be retrieved from 'SessionSubscribe' topic

Is this the Expected behavior ?

We are expecting that we should get all (static SGT and dynamic SGT )information form SXPBindings topicand not just the static binding.

[Nidhi]

Please check this discussion here which can provide some guidance. - Re: Publish SXP bindings on PxGrid

I am also checking with SME jeppich to provide inputs.

Thanks,

Nidhi

[Parag Mahajan]

Thanks Nidhi for reply. I have seen this post earlier but it did not answer question I am looking . Waiting for John to reply.

[hslai]

Correct. Those learned from ISE session directory should also publish through this pxGrid topic.

If you are seeing this in your lab, please share the setup info.

John is correct. This appears changed around ISE 2.1:

Session bindings are available in session_subscribe. So the decision was made that sxp_subscribe only gets those local static bindings. 

[jeppich · Accepted solution]

Hey Parag,

With regards to question #1, the answer is yes, devices must be statically defined,

with regards to question#2, the answer is yes,

with regard to "We are expecting that we should get all (static SGT and dynamic SGT )information form SXPBindings topicand not just the static binding",   you can also subscribe to the TrustSecMetaData Topic, this will give you the securitygroup id:, tag name, description, and tag number.

pxGrid v2 (available in ISE 2.4+) provides additional trustsec topics or services: https://github.com/cisco-pxgrid/pxgrid-rest-ws/wiki there is no longer TrustsecMetadataTopic. To learn more about pxGrid 2.0, please see:https://developer.cisco.com/site/pxgrid/ , and select pxGrid 2.0,

Also wrapping up a pxGrid 2.0 TDM deck, unicast me your email address and i will send out to you when completed. Also, send me an email with what you are trying to accomplish.

Thanks,

John

jeppich@cisco.com