pxgrid session

Synopsis

netapi ise pxgrid session <MAC_OR_IP>

Description

Retrieves a specific session by MAC address or IP address. Returns comprehensive session details including authentication method, endpoint profile, and authorization results.

Arguments

Argument Description

MAC_OR_IP

MAC address (any format) or IP address

Examples

By MAC Address

netapi ise pxgrid session 14:F6:D8:7B:31:80

By IP Address

netapi ise pxgrid session 10.50.10.108

Output

                         Session: 14:F6:D8:7B:31:80
 timestamp                 2026-01-24T01:25:08.019-08:00
 state                     STARTED
 userName                  modestus-p50.inside.domusdigitalis.dev
 macAddress                14:F6:D8:7B:31:80
 ipAddresses               ['10.50.10.108', '', 'fe80::b001:21cd:13c4:83e0']
 nasIpAddress              10.50.1.40
 nasPortId                 capwap_90000002
 nasIdentifier             WLC-LAB
 nasPortType               Wireless - IEEE 802.11
 endpointProfile           Linux-Workstation
 radiusFlowType            Wireless802_1x
 ssid                      78-bc-1a-36-82-c0:Domus-Secure
 authMethod                dot1x
 authProtocol              EAP-TLS
 selectedAuthzProfiles     ['Domus_Secure_Profile']
 auditSessionId            2801320A00001566EE8B6578

JSON Output

netapi ise pxgrid -f json session 14:F6:D8:7B:31:80 | jq '{user: .userName, profile: .endpointProfile, auth: .authProtocol}'

MAC Address Formats

All formats are accepted and normalized:

netapi ise pxgrid session 14:F6:D8:7B:31:80  # Colon-separated
netapi ise pxgrid session 14-F6-D8-7B-31-80  # Hyphen-separated
netapi ise pxgrid session 14F6D87B3180       # No separator

Session Not Found

Error: Session not found: C8:5B:76:C6:59:62

This means the endpoint has no active session. Check:

  • Is the device connected to the network?

  • Has authentication completed successfully?

  • Is the session on a different ISE PSN node?

  • Try the IP address instead if DHCP assigned recently

Key Fields

Field Description

authProtocol

EAP-TLS, PEAP, EAP-FAST, or Lookup (MAB)

endpointProfile

ISE profiler result (Linux-Workstation, Apple-iPad, etc.)

selectedAuthzProfiles

Authorization profiles applied (determines VLAN, dACL, etc.)

radiusFlowType

Wireless802_1x, WiredMAB, WirelessMAB, Wired802_1x

auditSessionId

Correlates with ISE RADIUS logs

See Also