Sunday, July 1, 2018

Ansible REST API - Interacting with Cisco FirePower Management Center (FMC) - 01 - Introduction

Ansible is a very good tool for Network Automation. It has a lot of build-in modules for different vendor systems such as Cisco, Juniper & AWS.

However, besides of these vendor specified modules, we can utilise the "uri" module in Ansible to make different REST Calls. As long as the remote system supports REST API, we can write Ansible scripts to interact with them.

In the following POST series, I will use my Ansible script for Cisco FirePower Management Center (FMC) as an example to describe how Ansible's REST script works.

Cisco FirePower is a very good & widely used next-Gen firewall. Especially in the enterprise environment. However, comparing to the old Cisco ASA firwall, Cisco FirePower doesn't have the time-based ACL. So it's impossible for us to apply some time-based access rules in Cisco FMC.

But Cisco FMC does supports REST API. So we can use Ansible Script to talk to FMC and automate the policy enable/disable process and work congestion with Linux CRON job to provide policy schedule functions.

You can download my playbooks from my github repo:

https://github.com/dennisjian/Ansible-with-Cisco-FMC-API

Here are the table of content of this Ansible Cisco FMC REST API series:

  1. Introduction and Ansible playbook download
  2. Script flow charts
  3. Introduction of REST API and Cisco FMC API Explorer
  4. Script prerequisites
  5. Request Access Token 
  6. Get policy content, modify content and "PUT' in FMC - Part 1
  7. Get policy content, modify content and "PUT' in FMC - Part 2 
  8. Get deployable devices and deploy policy
In the following post (02 - Flow Charts of the scripts), I will show you the flow chart of the scripts.

24 comments:

  1. We are really grateful for your blog post. You will find a lot of approaches after visiting your post. Great work

    Data Science Course

    ReplyDelete
  2. After reading your article I was amazed. I know that you explain it very well. And I hope that other readers will also experience how I feel after reading your article.
    Data Science Training Institute in Bangalore

    ReplyDelete
  3. This is an awesome motivating article.I am practically satisfied with your great work.You put truly extremely supportive data. Keep it up. Continue blogging. Hoping to persuing your next post

    Data Science Training

    ReplyDelete
  4. Really nice and interesting post. I was looking for this kind of information and enjoyed reading this one. Keep posting. Thanks for sharing.
    Best Data Science Courses in Bangalore

    ReplyDelete
    Replies
    1. Thanks for your comments. Happy to share more about my findings and experiences in the network automation. :-)

      Delete
  5. Stupendous blog huge applause to the blogger and hoping you to come up with such an extraordinary content in future. Surely, this post will inspire many aspirants who are very keen in gaining the knowledge. Expecting many more contents with lot more curiosity further.

    360DigiTMG Digital Marketing Course

    ReplyDelete
  6. Really wonderful blog completely enjoyed reading and learning to gain the vast knowledge. Eventually, this blog helps in developing certain skills which in turn helpful in implementing those skills. Thanking the blogger for delivering such a beautiful content and keep posting the contents in upcoming days.

    360DigiTMG Cyber Security Course

    ReplyDelete
  7. Thanks for spending all your pleasant time to make such a Creative content for us. AWS course in Chennai

    ReplyDelete
  8. We are really grateful for your blog post. You will find a lot of approaches after visiting your post. Great work
    data scientist training in malaysia

    ReplyDelete
  9. Impressive. Your story always bring hope and new energy. Keep up the good work.
    data science training in malaysia

    ReplyDelete
  10. First You got a great blog .I will be interested in more similar topics.I commend you for your excellent report on the knowledge that you have shared in this blog.

    digital marketing training in hyderabad
    free digital marketing course in hyderabad

    ReplyDelete
  11. As time progressed technology improved, at the same there was a requirement for faster transmission speeds from the WAN providers, this lead to the creation of Frame-Relay which on closer inspection operates in much the same way as X.25 but with out the extensive error detection and correction carried out by X.25. CCNA Classes in Pune

    ReplyDelete
  12. It's really a great and helpful bit of data that you have shared here. I'm glad that you just imparted this accommodating data to us. Kindly share these types of knowledge with us. Much thanks to you for sharing it CCNP Enarsi Training

    ReplyDelete
  13. Wonderful blog found to be very impressive to come across such an awesome blog. I should really appreciate the blogger for the efforts they have put in to develop such amazing content for all the curious readers who are very keen on being updated across every corner. Ultimately, this is an awesome experience for the readers. Anyways, thanks a lot and keep sharing the content in future too.

    Data Science Course in Bhilai

    ReplyDelete
  14. Impressive blog to be honest definitely this post will inspire many more upcoming aspirants. Eventually, this makes the participants experience and innovate themselves knowledge wise by visiting this kind of a blog. Once again excellent job keep inspiring with your cool stuff.

    Data Science Training in Bhilai

    ReplyDelete
  15. Adobe XD Crack - Adobe's new creative tool for designing high-quality prototypes of user interfaces for mobile and web applications . Adobe XD Cracked

    ReplyDelete
  16. This Birthday Cards item by SamfireHandmade has 14 favorites from Etsy shoppers. ... Happy Birthday From Your Better Half Funny Birthday Card image 1. Happy Birthday Better Half Images

    ReplyDelete

NSX Load Balancer "Application Rules" Examples:

Load Balancing is one of the features provided by the NSX Edge Services Gateway (ESG). It can provide L7 Load Balancing by utilizing the HA...