pxgrid sessions

Synopsis

netapi ise pxgrid sessions

Description

Retrieves all active RADIUS sessions from ISE via pxGrid. Returns real-time session data including MAC address, IP, username, endpoint profile, and authentication method.

Example

netapi ise pxgrid sessions

Output:

                              Active Sessions (6)
 MAC         IP           Username    Profile      Auth     NAS IP      State
 04:5F:B9:…  10.50.10.…   04:5F:B9:…  Cisco-Devi…  Lookup   10.50.1.10  STARTED
 14:F6:D8:…  10.50.10.…   modestus-…  Linux-Work…  EAP-TLS  10.50.1.40  STARTED
 70:15:FB:…  10.50.10.…   70:15:FB:…  Linux-Work…  Lookup   10.50.1.40  STARTED
 7E:DA:34:…  10.50.10.…   7E:DA:34:…  OS_X_Catal…  Lookup   10.50.1.40  STARTED
 90:32:4B:…  10.50.10.…   90:32:4B:…  Brother-De…  Lookup   10.50.1.40  STARTED
 FE:00:18:…  10.50.10.…   FE:00:18:…  Apple-iPad   Lookup   10.50.1.40  STARTED

JSON Output

netapi ise pxgrid -f json sessions | jq '.[0]'
{
  "timestamp": "2026-01-24T01:25:08.019-08:00",
  "state": "STARTED",
  "userName": "modestus-p50.inside.domusdigitalis.dev",
  "macAddress": "14:F6:D8:7B:31:80",
  "ipAddresses": ["10.50.10.108", "", "fe80::b001:21cd:13c4:83e0"],
  "nasIpAddress": "10.50.1.40",
  "endpointProfile": "Linux-Workstation",
  "authMethod": "dot1x",
  "authProtocol": "EAP-TLS",
  "selectedAuthzProfiles": ["Domus_Secure_Profile"],
  "ssid": "78-bc-1a-36-82-c0:Domus-Secure"
}

Session Fields

Field Description

macAddress

Endpoint MAC address

ipAddresses

Array of assigned IP addresses (IPv4, link-local, IPv6)

userName

Authenticated username or MAC for MAB

endpointProfile

ISE profiler classification (Linux-Workstation, Apple-iPad, etc.)

authMethod

Authentication method (dot1x, mab)

authProtocol

Protocol used (EAP-TLS, PEAP, Lookup for MAB)

nasIpAddress

Network Access Device IP

state

Session state (STARTED, DISCONNECTED)

selectedAuthzProfiles

Authorization profiles applied

ssid

Wireless SSID (if applicable)

auditSessionId

ISE audit session ID for log correlation

Real-Time Monitoring

# Watch sessions update every 5 seconds
watch -n 5 'netapi ise pxgrid sessions'

# Count sessions by auth method
netapi ise pxgrid -f json sessions | jq 'group_by(.authProtocol) | map({auth: .[0].authProtocol, count: length})'

See Also