Security

Hi

 

We are looking at using Ansible to automate the creation of Guest users through the Clearpass API's.

 

By the looks there appears to be two versions of the API's. The new ones you can access via API explorer and the older API that uncluded options to be able to modify Clearpass Configurations such as enforcment profiles and policies.

 

Does anybody know if I can modify/create enforcement profiles and policies using the new API's. Just can't seem to find details on it.

 

Thanks

No. Most configuration APIs are legacy. Creating guest users is not a configuration though.

Hi Tim

 

Thanks for responding, the problem we have is that we are assigning attributes such as IP address, routes etc using radius attributes to each of the guest users via enforcment policies and profiles. We have a few hundred of these users to create hence trying the automation path.

 

Do you know if the legacy API's are planned to be discontinued? If they are not planned to be discontinued I might see if we can get it done using them.

 

Thanks

 

 

Just store them as attributes as part of the guest account then use parameterized variables to return it to the NAS.

The legacy API is not being removed, but no new functionality or changes will be made to it.

Thanks Tim, had not even thought about doing it that way.

 

Greatly appreciated.