Cloud Managed Networks

 View Only

  • 1.  Central REST API How to register/remove a client

    Posted Oct 22, 2020 07:00 PM

    I am looking for info of how can I register (or how to force the Radius re-authentication process) and and how can I remove/unauthenticate/disconnect client using REST API from aruba central

    Thanks.



  • 2.  RE: Central REST API How to register/remove a client

    Posted Oct 26, 2020 07:16 PM

    Anyone?

    We are trying to integrate Aruba access points with our products and we need these NB API from API Gateway for that.
    Can somebody assist me or at lest help with pointing me to the right manual?



  • 3.  RE: Central REST API How to register/remove a client

    Posted Oct 30, 2020 04:56 AM
    Hi,

    In general, our developer hub is a great resource for all questions regarding automation and APIs: https://developer.arubanetworks.com/

    Have a look at this API endpoint to disconnect a wireless user via Central's RESTful API: https://developer.arubanetworks.com/aruba-central/reference/actioncommand#apiaction_commandsend_disconnect_user

    If you are just given the user details, you may need to check which AP this user is connected to first: https://developer.arubanetworks.com/aruba-central/reference/client#apiexternal_controllerget_wireless_client

    I am also wondering if your use cases should really be automated using Central's RESTful API as Central is primarily a network management system. Your RADIUS server may be a better-suited to serve your use cases as they revolve around AAA. If it is ClearPass, it definitely does have the necessary functionality exposed as a RESTful API. Have a look here: https://developer.arubanetworks.com/aruba-cppm/reference

    ------------------------------
    Moritz Wuerich
    ------------------------------

    Original Message


  • 4.  RE: Central REST API How to register/remove a client

    Posted Jan 05, 2021 04:10 PM

    Thanks for the replay. I really appreciate your help with "disconnect" command. It is exactly what i need.
    But now i stuck with the first part of my question. And I think I went through all topics in the developer hub but can not find any information about how can I register device (or at least force the AP to send another radius request to re-authenticate the device) using rest API.

    The only thing that I have found is that the login page should call directly the https://securelogin.hpe.com/swarm.cgi by posting the form. And that solution is not acceptable for us.
    Our external captive portal is a Single-Page-Application made by VueJS and the logic implemented in it is to send the user info (or sms, or call to Social-Signin, or whatever..) from JS code to our backend server that then updates our FreeRadius DB.
    The second step that we have implemented is that the backend should call a NB interface that in its turn should trigger a device re-validation against our Radius Server. But looks like aruba doesn't have such thing. :(
    I even tried to call that https://securelogin.hpe.com/swarm.cgi directly from JS to trigger that re-validation process, but it didn't work because AP has no OPTIONS method implemented. only GET and POST, but without OPTIONS any call from JavaScript failing with CORS error.

    BTW, our logic is based on Ruckus spec where they have such NB interface. But seems like Aruba is falling behind with such essential functionality.



    ------------------------------
    Alexander Shulgin
    ------------------------------

    Original Message


Related Content