Phase 7: API Validation

Phase 7: API Validation (curl — shared functions)

Load Credentials

dsource d000 dev/network/ise

Load Helper Functions

Copy-paste from data/shared/partials/:

Unresolved include directive in modules/ROOT/partials/projects/ise-home-rotation/phase-07-api-validation.adoc - include::partial$/../../../data/shared/partials/ise-ers/helpers.adoc[]

Unresolved include directive in modules/ROOT/partials/projects/ise-home-rotation/phase-07-api-validation.adoc - include::partial$/../../../data/shared/partials/ise-mnt/helpers.adoc[]

Verify Functions Loaded

type ers mnt 2>&1 | grep -E "function|not found"

ERS API

List NADs
ers "/networkdevice" | jq -C '[.SearchResult.resources[] | {name, id: .id[:12]}]'
Endpoint count
ers "/endpoint?size=1" | jq '.SearchResult.total'
Identity groups
ers "/identitygroup" | jq -r '.SearchResult.resources[].name'
Authorization profiles
ers "/authorizationprofile" | jq -r '.SearchResult.resources[].name'

MnT API

Active session count
mnt "/Session/ActiveCount" | xq -r '.sessionCount.count'
Active session list — IP / MAC / Username
mnt "/Session/ActiveList" | \
  xq -r '.activeList.activeSession[] | "\(.framed_ip_address)\t\(.calling_station_id)\t\(.user_name)"' | \
  column -t -s $'\t'

Certificate Verification

Unresolved include directive in modules/ROOT/partials/projects/ise-home-rotation/phase-07-api-validation.adoc - include::partial$/../../../data/shared/partials/ise-cert-check.adoc[]

DataConnect

netapi ise dc test

pxGrid

netapi ise pxgrid test

Validation Scorecard

API Status Notes

ERS (port 9060)

pending

NADs, endpoints, groups, profiles

MnT (port 443)

pending

Active sessions, session detail

OpenAPI (port 443)

pending

Deployment node info

DataConnect (port 2484)

pending

May need cert extraction: cp /etc/ssl/certs/DOMUS-ROOT-CA.pem ~/.secrets/certs/d000/ise/dataconnect.crt

pxGrid (port 8910)

pending

May need cert extraction: cp /etc/ssl/certs/DOMUS-ROOT-CA.pem ~/.secrets/certs/d000/ise/pxgrid.crt