cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

190
Views
5
Helpful
2
Replies
Highlighted
Cisco Employee

[Q] Export off all SG-ACLS

Hi Guys

 

Is there a way to export the contents of all SGACLs in a system?  I know we ran export the matrix which includes the name of the SGACLs, just now looking to export the SGACL itself.

 

Ta

Peter

 

Everyone's tags (2)
1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
VIP Advisor

Re: [Q] Export off all SG-ACLS

There is no export or import of the sgacl's via the GUI. So other than going one by one and grabbing them manually, the other option is that you can script the export with the API.

 

For example,If you request this URL it will tell you all configured SGACL's and their ID's.
https://<ise pan ip>:9060/ers/config/sgacl/

sgacl all.PNG

You then plug in the ID's to another request and it will spit out the content.
https://<ise pan ip>:9060/ers/config/sgacl/14dd7300-203a-11e9-9234-5aa798d92a6b

sgacl net mgmt.PNG

View solution in original post

2 REPLIES 2
Highlighted
VIP Advisor

Re: [Q] Export off all SG-ACLS

There is no export or import of the sgacl's via the GUI. So other than going one by one and grabbing them manually, the other option is that you can script the export with the API.

 

For example,If you request this URL it will tell you all configured SGACL's and their ID's.
https://<ise pan ip>:9060/ers/config/sgacl/

sgacl all.PNG

You then plug in the ID's to another request and it will spit out the content.
https://<ise pan ip>:9060/ers/config/sgacl/14dd7300-203a-11e9-9234-5aa798d92a6b

sgacl net mgmt.PNG

View solution in original post

Highlighted
Cisco Employee

Re: [Q] Export off all SG-ACLS

Thanks Damien  - on the money