Specifications

B-4
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Appendix B API Support
Device Filter Operations
• role: Specifies a role name. The role parameter is not required for the unauthenticated role (default)
but is required for “userole” or “check”.
• desc: Provides a description.
• ssip: Specifies the IP address used for configuring a Clean Access Server to Clean Access Manager.
The default is global.
Out Parameters: <!--error=mesg--> comment
• Success: mesg value of 0
• Failure: error string
removemac
The removemac function removes one or more MAC addresses from the Device Filters list.
Required In Parameters:
• op: removemac
• mac: Specifies one or more MAC addresses to delete from the device filters list. The MAC addresses
must exactly match the display format including wildcards. You can specify multiple MAC
addresses with a comma separated list.
Note If you do not use session-based authentication, the admin and passwd arguments are required. See
Authentication Requirements, page B-2.
Optional In Parameter:
• ssip: Specifies the IP address to use for configuring Clean Access Server to Clean Access Manager.
The default is global.
Out Parameters: <!--error=mesg--> comment
• Success: mesg value of 0
• Failure: error string
checkmac
The checkmac function queries the Device Filters list to check if a particular MAC address exists.
Required In Parameters:
• op: checkmac
• mac: Specifies the MAC address, which must exactly match the display format (00:01:12:23:34:45).
Optional In Parameter:
• ssip: Specifies the Clean Access Server IP address. By default, the checkmac function only checks
global filters. If ssip provided, the Clean Access Server filters are also checked.
Out Parameters: <!--error=mesg--> comment
• Success:
Either: