Changelog

[0.3.2] - 2026-01-20

Fixed

  • pfSense CLI Fixes

    • netapi pfsense interfaces - Handle interfaces with no IP address (trunk ports)

    • netapi pfsense info - Call correct API endpoints (/system/hostname, /system/version, /status/system)

    • netapi pfsense arp - Use correct field names (ip_address, mac_address) for API v2

  • ISE CLI Fixes

    • netapi ise get-nodes - Use correct SDK method (node_details.get_all() instead of node.get_all())

    • netapi ise dc profiler - Fix Oracle column names (edf_endpointpolicy prefix)

    • netapi ise dc device-types - Fix column names and add COALESCE fallback for null manufacturer

[0.3.1] - 2026-01-20

Changed

  • BREAKING: Renamed update-policy-set-condition to replace-policy-set-condition

    • The old command silently REPLACED existing conditions, causing network outages

    • New replace-policy-set-condition requires --force flag and shows warning

    • Added add-policy-set-condition as the safe default (preserves existing conditions)

Added

  • netapi ise add-policy-set-condition - Safely add conditions using OR logic (preserves existing)

  • netapi ise update-authz-profile --no-dacl - Remove dACL from authorization profile (for troubleshooting)

Fixed

  • Policy set condition commands now clearly distinguish between ADD (safe) and REPLACE (destructive)

  • Added confirmation prompt for destructive operations

[0.3.0] - 2026-01-19

Added

  • ISE Policy Rule Management

    • netapi ise get-auth-rules - List authentication rules for a policy set

    • netapi ise get-authz-rules - List authorization rules for a policy set

    • netapi ise add-auth-rule - Add authentication rule (e.g., EAP-TLS → AD_Cert_Profile)

    • netapi ise add-authz-rule - Add authorization rule (e.g., EAP-TLS → Domus_Secure_Profile)

    • netapi ise replace-policy-set-condition - Replace policy set condition (DESTRUCTIVE, requires --force)

  • Rejected Endpoint Management

    • netapi ise get-rejected-endpoints - List endpoints blocked by anti-RADIUS-spray protection

    • netapi ise release-rejected - Release a rejected endpoint to allow new auth attempts

  • DataConnect Live Auth Log

    • netapi ise dc recent - View recent authentications (passed/failed/all) from live RADIUS log

    • Replaces need for ISE GUI Live Logs

  • Authorization Profile Enhancements

    • Fixed reauth nested object support for ISE 3.2+ (reauth.timer, reauth.connectivity)

    • Fixed dACL and VLAN assignment on profile create/update

Fixed

  • Authorization profile SDK parameter mapping (snake_case vs camelCase)

  • Policy set condition update now correctly uses Open API

  • DataConnect SSL now only uses ISE_DATACONNECT_CA (not ISE admin CA fallback)

  • get-rejected-endpoints response parsing for ISE OperationResult format

[0.2.0] - 2026-01-18

Added

  • Documentation Scraper CLI (netapi docs)

    • scrape - Single page with custom CSS selector support

    • scrape-guide - Multi-chapter guide with TOC navigation

    • ise - Cisco ISE Admin Guide shortcut (versions 3.1, 3.2, 3.3, 3.4)

    • github - GitHub repository docs via API

    • arch - Arch Linux Wiki page scraper

  • Site-specific CSS selectors for: Arch Wiki, IMSLP, GitHub, Cisco DevNet, ReadTheDocs, Python docs, kernel.org, man7.org

  • Pandoc integration for HTML to AsciiDoc/Markdown conversion

  • Configurable request delay for rate limiting

  • beautifulsoup4 dependency for HTML parsing

  • types-beautifulsoup4 dev dependency for type checking

Changed

  • Updated pyproject.toml with new dependencies

[0.1.0] - 2026-01-14

Added

  • ISE CLI Commands

    • ERS API: netapi ise get-endpoint

    • MnT API: netapi ise mnt sessions, netapi ise mnt session

    • DataConnect: netapi ise dc stats

  • Multiple output formats: YAML (default), JSON, TABLE

  • dsec integration for secrets management

  • CA certificate verification with Age-encrypted CA support

Fixed

  • JSON output now uses plain print() for jq compatibility

  • dsec export format changed to double-quoted for tilde expansion

[0.0.1] - 2026-01-10

Added

  • Initial project structure

  • LaTeX documentation framework

  • Basic CLI scaffolding with Typer