Security

 View Only
last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Clearpass API - retrieve network information

This thread has been viewed 7 times
  • 1.  Clearpass API - retrieve network information

    Posted Aug 04, 2022 09:51 AM

    I'm working on an app - that would let users input an IP and it would tell them where it is on our network. 

    We thought to use Clearpass to do this.  Basically, I'd like to pull the information that Access Tracker will tell me if I click on a client, then Input then "Radius Request" - looking for the Calling-Station-ID, the Radius:IETF:Nas-Identifier (switch), and the Radius:IETF:Nas-Port-Id (switchport).  The Gui looks like this.  I'd like to pull this info via API, but can't figure out where it is in the API.



    ------------------------------
    Brannen Taylor
    LendingTree
    Manager, Network Operations
    ------------------------------


  • 2.  RE: Clearpass API - retrieve network information
    Best Answer

    EMPLOYEE
    Posted Aug 05, 2022 08:59 AM
    Access Tracker information is not available through the API afaik. What may work is to use an Endpoint Update enforcement to store the 'last location= %{Radius:IETF:NAS-Identifier}-%{Radius:IETF:NAS-Port-Id}'; and then through a first API call map the IP to the client MAC (/api/insight/endpoint/ip); and then through a second API call (/endpoint/mac-address/{mac_address}) get the endpoint attribute.

    There may be a smarter/quicker way to get to the result, but this is what I would explore first.

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 3.  RE: Clearpass API - retrieve network information

    Posted Aug 05, 2022 09:08 AM
    Thanks Herman.  I'll try to figure out how to do your suggestion.

    ------------------------------
    Brannen Taylor
    LendingTree
    Manager, Network Operations
    ------------------------------



  • 4.  RE: Clearpass API - retrieve network information

    Posted Aug 07, 2022 05:08 PM
    Hi all,

    You may also request cppm TipsLogDb by PSQL to find the information you need.

    Hope this help