Cisco Cisco Security Manager 4.11 Guía Del Usuario

Cisco Security Manager 4.11 API Specification (Version 2.3)

Page 244

}

//Step 2:

client.doPost(uri, payload, host,

true

);

}
}

catch

(Exception ex){

System.

out

.println(ex.getMessage()); usage();}

}

public

static

void

usage(){

System.

out

.println(

"Please check the data entered in the properties file"

);

System.

out

.println(

"Usage : "

);

System.

out

.println(

"java RestClient <path_to_client.properties> [<uri>]"

);

}
}

9.5 Fetch CSM defined firewall policy

The following simple sample program implemented in java demonstrates a REST client that fetches the CSM
firewall policy as it is defined in the CSM UI. Use the following client.properties file (Change the gid value to
match the GID of a device in the server’s inventory) :

USER=admin
PASSWORD=admin
HOST=localhost
XML_REQUEST=<?xml version=\"1.0\" encoding=\"UTF-8\"?>\
<csm:policyConfigByDeviceGIDRequest xmlns:csm=\"csm\">\
<protVersion>1.0</protVersion>\
<reqId>123</reqId>\
<gid>00000000-0000-0000-0000-004294967307</gid>\
<policyType>DeviceAccessRuleFirewallPolicy</policyType>\
</csm:policyConfigByDeviceGIDRequest>

# Set LOGIN_REQUIRED to true if the URI supplied
# requires login to be done as a prerequisite.
LOGIN_REQUIRED=true
URI=https://localhost/nbi/configservice/getPolicyConfigById

After compiling, use the following command to run the program:

Command Prompt> java RestClient <path_to_client.properties> [<uri>]

Class

RestClient.java

/**

* Sample Program to get access rules defined on a firewall as it appears in the
* CSM UI.

import

java.io.ByteArrayInputStream;

import

java.io.IOException;

import

java.net.URI;

import

java.security.KeyManagementException;

import

java.security.NoSuchAlgorithmException;

import

java.security.SecureRandom;

import

java.security.cert.X509Certificate;

import

javax.net.ssl.SSLContext;