Security

 View Only
last person joined: yesterday 

Enterprise security using ClearPass Policy Management, ClearPass Security Exchange, IntroSpect, VIA, 360 Security Exchange, Extensions and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Clearpass API - retrieve network information

Jump to Best Answer
This thread has been viewed 7 times
  • 1.  Clearpass API - retrieve network information

    Posted 9 days ago

    I'm working on an app - that would let users input an IP and it would tell them where it is on our network. 

    We thought to use Clearpass to do this.  Basically, I'd like to pull the information that Access Tracker will tell me if I click on a client, then Input then "Radius Request" - looking for the Calling-Station-ID, the Radius:IETF:Nas-Identifier (switch), and the Radius:IETF:Nas-Port-Id (switchport).  The Gui looks like this.  I'd like to pull this info via API, but can't figure out where it is in the API.



    ------------------------------
    Brannen Taylor
    LendingTree
    Manager, Network Operations
    ------------------------------


  • 2.  RE: Clearpass API - retrieve network information
    Best Answer

    EMPLOYEE
    Posted 8 days ago
    Access Tracker information is not available through the API afaik. What may work is to use an Endpoint Update enforcement to store the 'last location= %{Radius:IETF:NAS-Identifier}-%{Radius:IETF:NAS-Port-Id}'; and then through a first API call map the IP to the client MAC (/api/insight/endpoint/ip); and then through a second API call (/endpoint/mac-address/{mac_address}) get the endpoint attribute.

    There may be a smarter/quicker way to get to the result, but this is what I would explore first.

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 3.  RE: Clearpass API - retrieve network information

    Posted 8 days ago
    Thanks Herman.  I'll try to figure out how to do your suggestion.

    ------------------------------
    Brannen Taylor
    LendingTree
    Manager, Network Operations
    ------------------------------



  • 4.  RE: Clearpass API - retrieve network information

    Posted 6 days ago
    Hi all,

    You may also request cppm TipsLogDb by PSQL to find the information you need.

    Hope this help