Aruba Central APIs. Adolfo Bolivar April 2018

Transcription

1 Aruba Central APIs Adolfo Bolivar April 2018

2 Agenda Why APIs? Enabling Aruba Central to support APIs Getting the Access token and refresh token via APIs Aruba Central APIs Demos: 1. Proactive notifications 2. Guest Access - sessions track

3

4

5

6 What is an API (Application Programming Interface) Human Readable Machine Readable Central

7 API Gateway Central Entry Point to API requests Security > Threat protection

8 {REST} API

9 REST API v REST is an API that allows clients to perform read/write operations. v REST uses HTTP to perform a set of actions: Create --> Post Read --> Get Update --> Put Delete --> Delete

10 REST API

11 What is JSON? { key : value } { key 1 : value 1, key 2 : value 2 } { "name": "John", "age": 30, "car": null } { "name": "John", "age": 30, "cars": [ "Ford", "BMW", "Fiat" ] }

12 Overview API Call Application HTTP Client Central API GW HTTP Server HTTPS OAUTH 2.0 Implementation to get Access Token Get Request + Access Token Validate Access Token 200 OK Response Code + Data in JSON format Post Request + Data in JSON format + Access Token Validate Access Token 200 OK Response Code + Data in JSON format

13 Enabling Aruba Central to support APIs

14 Open a case with TAC support and request to enable API Gateway

15 Internal Address Employees & TAC only

16 Authorize a new application

17 New application: Postman

18 New application: Postman "client_id": clientid "client_secret": clientsecret

19 What is an Access Token? Access Token: string representing an access authorization issued to the client, rather than using the resource owner's credentials directly.

20 Viewing Access Token Access token expires in 7200seg/120min/2hrs

21 What is a Refresh Token? Refresh Token: special kind of token that can be used to obtain a renewed access token. Refresh tokens must be stored securely by an application because they essentially allow a user to remain authenticated forever.

22 Getting a new Access Token params = { "client_id": clientid, "client_secret": clientsecret, "grant_type": "refresh_token", "refresh_token": refresh_token }

23 New Access and Refresh Tokens > Answer from Central

24 Getting the Access token and refresh token via APIs

25 Creating a gmail admin account From SEEL - ArubaCentral setup (Internal users) 1.Allow users. users with string "centraldemo" in the id; e.g., user+centraldemo@gmail.com, mycentraldemoid@hotmail.com etc.

26 gmail admin account added to Central

27 Confirmation from Central

28 Get the CSRF token { "username": "marxxxxx+centraldemo1@gmail.com", "password": XXXXXXX }

29 Get the CSRF token -> Answer from Central Session - Cookie: d6f95f91ab713556_5acccc70.kkwkbxxxxxxxxx CSRF token: "##8a8aa936d43dXXXXXXXX"

30 Get the Auth token { "customer_id": "500XXXX" }

31 Get the Auth token -> Answer from Central Code: 990WpoaPMQbVXXXXX

32 Get the Access token and Refreh token

33 Get the Access token and Refreh token -> Answer from Central

34 Task: Each time a virtual controller is disconnected for +10min, notify via Webhook

35 List Notifications supported by Central

36 List Notifications > Answer from Central { "name": "Virtual controller disconnected" },

37 List Webhooks Answer from Central

38 Create Webhook trigger in Built.io

39 Add a webhook { "name": "Built.io Webhook", "urls": [" }

40 Add a webhook > Answer from Central "wid": "0d7b375a e1a-89e6-e4XXXXXXXX"

41 Enable "Virtual controller disconnected notification/alert and point it to Webhook { "type": "Virtual controller disconnected", "rules": [ { "severity": "Critical", "delivery_options": [ "Webhook" ], " s": [ ], "webhooks": ["0d7b375a e1a-89e6-e4875f760f38"], "group": [ ], "label": [ ], "device_id": [ ], "duration": 10, "value": "string" } ], "active": true }

42 Enable "Virtual controller disconnected notification/alert and point it to Webhook > Answer from Central

43 Check the notification/alert > Answer from Central

44 Disconnect Virtual Controller > After 10 minutes Answer from Central

45 Disconnect Virtual Controller > After 10 minutes > Built.io log

46 Task: Guest Access - sessions tracking

47 Check Guest Portals available

48 Guest Portals -> Answer from Aruba Central Demo Captive Portal : Guest portal ID

49 Check the sessions associated to the Guest Portal &sort=%2baccount_name&limit=100

50 Check the sessions associated to the Guest Portal -> Answer from Central

51 Guest: login date and time login_at parameter is in epoch time format Python script to convert the epoch time format to human readable:

52 Thanks

53 References Guide-to-Network-Automation-and/gpm-p/ _Basics (Oauth 2.0 RFC)