Quarantine/Un-quarantine an endpoint by REST API of ISE

[zhaoz]

hi Cisco,

I deployed one Cisco ISE VM(version 2.7.0) in VMware ESXi. I'm working on REST API of ISE. My requirement is to quarantine/un-quarantine the IP address of endpoints by REST API. Right now I have 2 questions:

1. I tried to use "/ers/config/ancendpoint/apply" to quarantine the MAC address of endpoint. The quarantine was successful. But if I only use the IP address of endpoint, I always get error code 500 and title is "

Session lookup failure". How can I quarantine one endpoint by its IP address?
2. I didn't find out descriptions about the REST API of un-quarantine in ISE SDK. I also looked up massive materials online but no lucky. How can I un-quarantine one endpoint (by IP address) by REST API?

Thanks a lot.

[zhaoz]

hi,

I used Postman to call REST API. Basically you need to configure "Auth" by username and password, and set url and json data properly. For example, if you want to quarantine endpoints by mac address, set "name" to "macAddress". Simply reference the configuration below.

 

The docs of Cisco are very helpful.

ANC Endpoint - Cisco Identity Services Engine API Reference Guide, Release 3.0 - Document - Cisco DevNet