Removing group of Endpoints from Endpoint ID Group

[vic delussey]

Can anyone tell me how to remove a group of MAC endpoints from an ID Group?

I have hundreds of devices coming end of life and i would like to remove , i can only see manual removal of single endpoints.

Is there any way to export/remove similar to import process for intial endpoint access?

ISE Ver.3.0.0.458

[thomas · Accepted solution]

See ISE ERS API Examples for more and of course our many webinars on REST APIs on our ISE YouTube channel.

Create an endpoint:

curl  --include  --insecure  --location \
  --header 'Accept: application/json' \
  --header 'Content-Type: application/json' \
  --user $ISE_REST_USERNAME:$ISE_REST_PASSWORD  \
  --request POST https://$ISE_HOSTNAME/ers/config/endpoint \
  --data '
{
  "ERSEndPoint" : {
    "mac" : "00:01:02:03:04:05",
    "name" : "Test Endpoint"
  }
}'

The 201 response will contain the Location field with the UUID of the endpoint:

HTTP/1.1 201
...
Location: https://128.107.222.150/ers/config/endpoint/919cd470-e459-11ed-be18-16c32cf2bd2e

You may also use GET by name operations to find your respective endpoints and their UUID:

GET https://$ISE_HOSTNAME/ers/config/endpoint
GET https://$ISE_HOSTNAME/ers/config/endpoint/name/{name}

The endpoint API requires the endpoint's UUID to delete it:

curl  --include  --insecure  --location \
  --header 'Accept: application/json' \
  --user $ISE_REST_USERNAME:$ISE_REST_PASSWORD  \
  --request DELETE https://$ISE_HOSTNAME/ers/config/endpoint/919cd470-e459-11ed-be18-16c32cf2bd2e
HTTP/1.1 204
​