Yeah I have not gained much traction from TAC on this concern so here is the current code snippet to achieve what I was looking to do:
def ise_nad_update(IP_ADDR):
NAD_NAME = raw_input("Enter the Edge node site ID: ")
if len(NAD_NAME) > 5:
print"**********************************************************"
print "Error!Must be less than 5 char & in SDA Site ID format"
print "*********************************************************"
sys.exit()
while True:
loc = ["BLDG 1", " BLDG 2", " BLDG 3", " BLDG 4", " BLDG 5"]
LOC = raw_input("Enter the building location: ")
if len(LOC) <= 4 and LOC in loc:
break
else:
print "Please enter a Campus location(309, 300, 510, 602)"
continue
while True:
own = ["owner1", "owner2", "owner3"]
OWNER = raw_input("Enter NAD owner: ").upper()
if len(OWNER) <= 6 and OWNER in own:
break
else:
print "Please enter proper owner of asset(joe, sally, mike)"
continue
print "Grabbing NAD ID from ISE database"
for i in tqdm(range(2)):
sleep(5)
print "*****************"
API_DEVICE = "https://<ISEFQDN>:9060/ers/config/networkdevice?filter=ipaddress.EQ." + IP_ADDR
API_ERS_USER = "<user>","<password>"
HEADERS = {
'Accept': "application/json",
'Content-Type': "application/json",
}
r = requests.get(url=API_DEVICE, auth=API_ERS_USER, headers=HEADERS, verify=True)
temp = r.text
nad_id = json.loads(temp)
for nad in nad_id['SearchResult']['resources']:
temp2 = nad['id']
print "ISE NAD ID:" + temp2
print "Getting ready to update the NAD in ISE"
print "**********************"
print "ISE Request", r.reason
print "**********************"
API_DATA = {
"NetworkDevice": {
"id": temp2,
"name": "<SITE NAME>" + NAD_NAME,
"profileName": "Cisco",
"coaPort": "1700",
"authenticationSettings" : {
},
"snmpsettings" : {
"pollingInterval" : 3600,
"linkTrapQuery" : "false",
"macTrapQuery" : "false",
},
"trustsecsettings" : {
"deviceAuthenticationSettings" : {
},
"sgaNotificationAndUpdates" : {
"downlaodEnvironmentDataEveryXSeconds" : 86400,
"downlaodPeerAuthorizationPolicyEveryXSeconds" : 86400,
"reAuthenticationEveryXSeconds" : 86400,
"downloadSGACLListsEveryXSeconds" : 86400,
"otherSGADevicesToTrustThisDevice" : "true",
"sendConfigurationToDevice" : "true",
"sendConfigurationToDeviceUsing" : "ENABLE_USING_COA",
"coaSourceHost" : "<ISE PSN>",
},
"deviceConfigurationDeployment" : {
"includeWhenDeployingSGTUpdates" : "true",
}
},
"NetworkDeviceIPList": [
{
"ipaddress": IP_ADDR,
"mask": 32,
}
],
"NetworkDeviceGroupList": [
"Location#All Locations#" + LOC,
"Device Type#All Device Types#SDA#" + OWNER,
"IPSEC#Is IPSEC Device#No",
]
}
}
API_DEVICE = "https://<ISE FQDN>:9060/ers/config/networkdevice/" + temp2
API_ERS_USER = "<user>","<password>"
r = requests.put(url=API_DEVICE, auth=API_ERS_USER, json=API_DATA, verify=True)
print r.text
print "***************"
print "ISE Request", r.reason
print "***************"
sys.exit()
I pass IP_ADDR from another function. Then ask the user for building, owner, and the site id which then gets appended to 'name' so that I do not overwrite the NAD name obtained from DNAC via pxgrid. Thank you all.
