IOS-XE RESTCONF DELETE of trustsec cts config

[bmrajesh]

Hi,

I am trying to delete a "cts role-based sgt-map 40.1.1.0/24 sgt 40" config using restconf and it doesn't work.

I tried using below DELETE URIs

restconf/data/Cisco-IOS-XE-native:native/cts/Cisco-IOS-XE-cts:role-based/sgt-map-list=40.1.1.0  

restconf/data/Cisco-IOS-XE-native:native/cts/Cisco-IOS-XE-cts:role-based/sgt-map-list=40.1.1.0%2F24  

If the config is "cts role-based sgt-map 135.1.1.1 sgt 135", then it works:

restconf/data/Cisco-IOS-XE-native:native/cts/Cisco-IOS-XE-cts:role-based/sgt-map-list=135.1.1.1  

Delete of sgt-map with ip address works but subnets doesn't work.

My ios-xe version is 17.03.03

Could you please help be find the correct URI or restconf way of deleting a subnet SGT.

Thanks!!!

[alexstev]

Hello @bmrajesh,

Have you seen the following discussion?

SOLVED - IOS-XE RESTCONF delete elemet of the config

You can also check the Cisco Bug Search Tool for that issue and version:

Cisco Bug Search Tool

Hope this helps!

[bmrajesh]

Hi Alex,

Yes i did see that discussion before asking for help.

My problem is specific to deleting "subnet to sgt" sgt-map. Delete of "IP to sgt" sgt-map works fine.

For ex: Deleting ""cts role-based sgt-map 40.1.1.0/24 sgt 40" doesn't work. Please note the /24

Deleting "cts role-based sgt-map 135.1.1.1 sgt 135" works fine.

Thanks,

Rajesh