ERS Network Devices

Synopsis

netapi ise get-nads [OPTIONS]
netapi ise get-nad <NAME>
netapi ise create-nad <NAME> <IP_ADDRESS> <RADIUS_SECRET> [OPTIONS]
netapi ise update-nad <NAME> [OPTIONS]
netapi ise delete-nad <NAME> [OPTIONS]

Commands

get-nads

List all Network Access Devices.

netapi ise get-nads
netapi ise get-nads --size 50 --page 2
netapi ise get-nads --format json
Options
--size, -s INTEGER    Results per page (default: 100)
--page, -p INTEGER    Page number (default: 1)
Sample Output
Name            IP Address      Profile           Status
----            ----------      -------           ------
SW1-CORE        10.50.1.11      Cisco             Active
SW2-ACCESS      10.50.1.12      Cisco             Active
WLC-9800        10.50.1.40      Cisco             Active

get-nad

Get specific NAD details.

netapi ise get-nad --name SW1-CORE
netapi ise get-nad --name WLC-9800 --format json

create-nad

Create a new network access device.

netapi ise create-nad "SW1-ACCESS" "10.50.1.12" "MySecret123"
netapi ise create-nad "SW1-ACCESS" "10.50.1.12" "MySecret123" --profile "Cisco"
netapi ise create-nad "SW1-ACCESS" "10.50.1.12" "MySecret123" \
  --profile "Cisco" \
  --description "Access switch for Building 1" \
  --coa-port 1700
Options
--profile, -p TEXT        Device profile (e.g., Cisco)
--description, -d TEXT    Device description
--coa-port INTEGER        CoA port (default: 1700)

update-nad

Update an existing network access device.

netapi ise update-nad "SW1-ACCESS" --ip "10.50.1.13"
netapi ise update-nad "SW1-ACCESS" --name "SW1-CORE"
netapi ise update-nad "SW1-ACCESS" --profile "Cisco-Switch"
netapi ise update-nad "SW1-ACCESS" --secret "NewSecret456"
Options
--name TEXT               New NAD name
--ip TEXT                 New IP address
--secret TEXT             New RADIUS secret
--profile, -p TEXT        New device profile
--description, -d TEXT    New description

delete-nad

Delete a network access device.

netapi ise delete-nad "SW1-ACCESS"
netapi ise delete-nad "SW1-ACCESS" --force
Options
--force, -f    Skip confirmation prompt

Configuration via YAML

network_device:
  name: SW3-ACCESS
  ip_address: 10.50.1.13
  profile_name: Cisco
  coa_port: 1700
  radius_shared_secret: ${RADIUS_SECRET}
  snmp:
    link_trap_query: true
    mac_trap_query: true
    community: ${SNMP_COMMUNITY}
  tacacs_shared_secret: ${TACACS_SECRET}