Sessions API

# Load credentials from dsec
dsource d000 dev/network

# MnT API configuration (FQDN preferred, IP fallback)
ISE_MNT="${ISE_MNT_FQDN:-${ISE_PAN_FQDN:-$ISE_PAN_IP}}"

# Compose auth string for curl (not a dsec variable)
ISE_AUTH="${ISE_API_USER}:${ISE_API_PASS}"

BASE_URL="https://${ISE_MNT}/admin/API/mnt"

# Get active session count (curl)
curl -sk -u "${ISE_AUTH}" \
  "${BASE_URL}/Session/ActiveCount" \
  -H "Accept: application/xml"

# Get active session count (netapi)
netapi ise mnt count

# Get active sessions list (curl - XML response)
curl -sk -u "${ISE_AUTH}" \
  "${BASE_URL}/Session/ActiveList" \
  -H "Accept: application/xml"

# Get active sessions (netapi - table format)
netapi ise mnt sessions

# Get session by MAC address (curl)
MAC="C8:5B:76:C6:59:62"
curl -sk -u "${ISE_AUTH}" \
  "${BASE_URL}/Session/MACAddress/${MAC}" \
  -H "Accept: application/xml"

# Get session by MAC (netapi)
netapi ise mnt session "C8:5B:76:C6:59:62"

# Get session by IP address (curl)
IP="10.50.10.100"
curl -sk -u "${ISE_AUTH}" \
  "${BASE_URL}/Session/EndPointIPAddress/${IP}" \
  -H "Accept: application/xml"

# Get sessions by username (curl)
USERNAME="jsmith"
curl -sk -u "${ISE_AUTH}" \
  "${BASE_URL}/Session/UserName/${USERNAME}" \
  -H "Accept: application/xml"

# Get all sessions from specific NAS (switch/WLC)
NAS_IP="10.50.1.10"
curl -sk -u "${ISE_AUTH}" \
  "${BASE_URL}/Session/ActiveList" \
  -H "Accept: application/xml" | \
  grep -A20 "<nas_ip_address>${NAS_IP}</nas_ip_address>"

# Get authentication status for MAC (curl)
MAC="C8:5B:76:C6:59:62"
curl -sk -u "${ISE_AUTH}" \
  "${BASE_URL}/AuthStatus/MACAddress/${MAC}" \
  -H "Accept: application/xml"

# Get authentication status (netapi)
netapi ise mnt auth-status "C8:5B:76:C6:59:62"

# Get failure reasons (curl)
curl -sk -u "${ISE_AUTH}" \
  "${BASE_URL}/FailureReasons" \
  -H "Accept: application/xml"

# Get failure reasons (netapi)
netapi ise mnt failure-reasons

# Get MnT API version (curl)
curl -sk -u "${ISE_AUTH}" \
  "${BASE_URL}/Version" \
  -H "Accept: application/xml"

# Get MnT API version (netapi)
netapi ise mnt version