Security

Reply
Highlighted
Contributor I

Clearpass API's

Hi

 

We are looking at using Ansible to automate the creation of Guest users through the Clearpass API's.

 

By the looks there appears to be two versions of the API's. The new ones you can access via API explorer and the older API that uncluded options to be able to modify Clearpass Configurations such as enforcment profiles and policies.

 

Does anybody know if I can modify/create enforcement profiles and policies using the new API's. Just can't seem to find details on it.

 

Thanks

Guru Elite

Re: Clearpass API's

No. Most configuration APIs are legacy. Creating guest users is not a configuration though.

| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
Contributor I

Re: Clearpass API's

Hi Tim

 

Thanks for responding, the problem we have is that we are assigning attributes such as IP address, routes etc using radius attributes to each of the guest users via enforcment policies and profiles. We have a few hundred of these users to create hence trying the automation path.

 

Do you know if the legacy API's are planned to be discontinued? If they are not planned to be discontinued I might see if we can get it done using them.

 

Thanks

 

 

Guru Elite

Re: Clearpass API's

Just store them as attributes as part of the guest account then use parameterized variables to return it to the NAS.

The legacy API is not being removed, but no new functionality or changes will be made to it.

| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
Contributor I

Re: Clearpass API's

Thanks Tim, had not even thought about doing it that way.

 

Greatly appreciated.

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: