Cisco Cisco Identity Services Engine 1.3 전단

3-10

思科身份服务引擎 API 参考指南，版本 1.4

OL-26134-01

第 3 章用于故障排除的查询 API

使用查询 API 调用对 Cisco ISE 进行故障排除

AuthStatus API 调用返回的数据示例

以下示例展示了在目标思科监控 ISE 节点上发起 AuthStatus API 调用时返回的数据：

This XML file does not appear to have any style information associated with it. The

document tree is shown below.

<failed xsi:type="xs:boolean">false</failed>

<user_name>suser77</user_name>

<nas_ip_address>10.77.152.209</nas_ip_address>

<calling_station_id>00:0C:29:46:F3:B8</calling_station_id>

<identity_group>User Identity Groups:Guest</identity_group>

<acs_server>guest-240</acs_server>

<acs_timestamp>2012-10-05T10:50:56.515Z</acs_timestamp>

<execution_steps>5231</execution_steps>

<message_code>5231</message_code>

<acsview_timestamp>2012-10-05T10:50:56.517Z</acsview_timestamp>

<identity_store>Internal Users</identity_store>

<response_time>146</response_time>

<other_attributes>ConfigVersionId=81,EndPointMACAddress=00-0C-29-46-F3-B8,PortalName=Defau

ltGuestPortal,

CPMSessionID=0A4D98D1000001F26F0C04D9,CiscoAVPair=</other_attributes>

</authStatusElements>

<failed xsi:type="xs:boolean">false</failed>

<user_name>00:0C:29:46:F3:B8</user_name>

<nas_ip_address>10.77.152.209</nas_ip_address>

<calling_station_id>00:0C:29:46:F3:B8</calling_station_id>

<identity_group>Guest_IDG</identity_group>

<network_device_name>switch</network_device_name>

<acs_server>guest-240</acs_server>

<authentication_method>mab</authentication_method>

<authentication_protocol>Lookup</authentication_protocol>

<acs_timestamp>2012-10-05T10:49:47.915Z</acs_timestamp>

<execution_steps>11001,11017,11027,15049,15008,15048,15048,15004,15041,15006,15013,24209,2

421

1,22037,15036,15048,15004,15016,11022,11002</execution_steps>

<response>{UserName

=00:0C:29:46:F3:B8; User-Name=00-0C-29-46-F3-B8;

State=ReauthSession:0A4D98D1000001F26F0C04D9;

Class=CACS:0A4D98D1000001F26F0C04D9:guest-240/138796808/76;

Termination-Action=RADIUS-Request; Tunnel-Type=(tag=1) VLAN;

Tunnel-Medium-Type=(tag=1) 802; Tunnel-Private-Group-ID=(tag=1) 2;

cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT;

cisco-av-pair=url-redirect=https://guest-240.cisco.com:8443/guestportal/gateway?

sessionId=0A4D98D1000001F26F0C04D9&action=cwa;

cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-pre-posture-506e980a;

cisco-av-pair=profile-name=WindowsXP-Workstation;}</response

><audit_session_id>0A4D98D1000001F26F0C04D9</audit_session_id><nas_po

rt_id>GigabitEthernet1/0/17</nas_port_id><posture_status>Pending</posture_status>

<selected_azn_profiles>CWA_Redirect</selected_azn_profiles>

<service_type>Call Check</service_type>

<message_code>5200</message_code>

<nac_policy_compliance>Pending</nac_policy_compliance>