MnT API

Overview

The Monitoring and Troubleshooting (MnT) API provides real-time access to active sessions, authentication status, and Change of Authorization (CoA) operations.

Base URL

ise-01.inside.domusdigitalis.dev/admin/API/mnt

Port

443 (HTTPS)

Auth

Basic Authentication

Format

XML (primary), some JSON

Node

MnT node (can be PAN in small deployments)

Capabilities

Category Operations Endpoints

Sessions

Active list, by MAC/IP/user, count

6+

CoA

Reauthenticate, disconnect

4

Auth Status

Check authentication result

2

Failure Reasons

Lookup failure codes

1

Subpages

Quick Setup

dsource d000 dev/network
ISE_MNT="${ISE_MNT_IP:-$ISE_PAN_IP}"
ISE_AUTH="${ISE_API_USER}:${ISE_API_PASS}"
BASE_URL="https://${ISE_MNT}/admin/API/mnt"

Session Endpoints

Active Sessions

# All active sessions
curl -sk -u "${ISE_AUTH}" \
  "${BASE_URL}/Session/ActiveList" \
  -H "Accept: application/xml"

# Count only
curl -sk -u "${ISE_AUTH}" \
  "${BASE_URL}/Session/ActiveCount" \
  -H "Accept: application/xml"

Session by MAC

MAC="C8:5B:76:C6:59:62"
curl -sk -u "${ISE_AUTH}" \
  "${BASE_URL}/Session/MACAddress/${MAC}" \
  -H "Accept: application/xml"

Session by IP

IP="10.50.10.100"
curl -sk -u "${ISE_AUTH}" \
  "${BASE_URL}/Session/EndPointIPAddress/${IP}" \
  -H "Accept: application/xml"

Session by Username

USER="jsmith"
curl -sk -u "${ISE_AUTH}" \
  "${BASE_URL}/Session/UserName/${USER}" \
  -H "Accept: application/xml"

CoA Endpoints

Reauthenticate

NAS_IP="10.50.1.10"
MAC="C8:5B:76:C6:59:62"
curl -sk -u "${ISE_AUTH}" \
  "${BASE_URL}/CoA/Reauth/${NAS_IP}/${MAC}/1" \
  -H "Accept: application/xml" \
  -X PUT

Disconnect (Port Bounce)

curl -sk -u "${ISE_AUTH}" \
  "${BASE_URL}/CoA/Disconnect/${NAS_IP}/${MAC}/1" \
  -H "Accept: application/xml" \
  -X PUT

Auth Status

# Check authentication status
MAC="C8:5B:76:C6:59:62"
curl -sk -u "${ISE_AUTH}" \
  "${BASE_URL}/AuthStatus/MACAddress/${MAC}" \
  -H "Accept: application/xml"

Failure Reasons

# Get all failure reason codes
curl -sk -u "${ISE_AUTH}" \
  "${BASE_URL}/FailureReasons" \
  -H "Accept: application/xml"

netapi Commands

# List active sessions
netapi ise mnt sessions

# Get session by MAC
netapi ise mnt session "C8:5B:76:C6:59:62"

# Reauthenticate
netapi ise mnt coa --mac "C8:5B:76:C6:59:62" --action reauth

# Disconnect
netapi ise mnt coa --mac "C8:5B:76:C6:59:62" --action disconnect

Response Format

MnT returns XML. Parse with grep or convert to JSON:

# Extract MACs from active list
curl -sk -u "${ISE_AUTH}" "${BASE_URL}/Session/ActiveList" \
  -H "Accept: application/xml" | \
  grep -oP '(?<=<calling_station_id>)[^<]+'

# Convert to JSON with yq
curl -sk -u "${ISE_AUTH}" "${BASE_URL}/Session/ActiveList" \
  -H "Accept: application/xml" | yq -p xml -o json

See Also