Session Subscribe
Verification
This test verifies that once a third party system can register is connected to the pxGrid that the client can subscribe to topics of information available on the pxGrid. In this case the pxGrid client will subscribe to updates to user authentication status.
Definition
Once the client has successfully registered and been authorized to the session and ANC group by the pxGrid controller, the client will subscribe to the capabilities and obtain relevant session information for the authenticated user. The ISE MnT node will publish the ISE Session Directory as a topic to the pxGrid controller. The pxGrid client will subscribe to this capability and obtain the authenticated user's active sessions or notifications in real-time.
Example
The pxGrid client will subscribe to the SessionDirectory capability and receive notifications in real-time.
- Run session_subscribe script
./session_subscribe.sh -a 10.0.0.37 -u mac_session -k alpha.jks -p cisco123 -t alpha_root.jks -q cisco123
Results: Refer to the right hand panel.
Results of the session_subscribe script
------- properties -------
version=1.0.2-30-SNAPSHOT
hostnames=10.0.0.37
username=mac_session
group=Session
description=null
keystoreFilename=alpha.jks
keystorePassword=cisco123
truststoreFilename=alpha_root.jks
truststorePassword=cisco123
--------------------------
13:00:10.800 [Thread-1] INFO com.cisco.pxgrid.ReconnectionManager - Started
Connecting...
Connected
Filters (ex. '1.0.0.0/255.0.0.0,1234::/16,...' or <enter> for no filter): 13:00:12.205 [Thread-1] INFO com.cisco.pxgrid.ReconnectionManager - Connected
- Select Administration > pxGrid Services
The pxGrid client has subscribed to the SessionDirectory Topic.
- Logoff and login to the client PC to see the following notifications in real-time, as shown in the right hand panel.
Logoff and login to the client PC to see the following notifications
------- properties -------
version=1.0.2-30-SNAPSHOT
hostnames=10.0.0.37
username=mac_session
group=Session
description=null
keystoreFilename=alpha.jks
keystorePassword=cisco123
truststoreFilename=alpha_root.jks
truststorePassword=cisco123
--------------------------
06:58:07.070 [Thread-1] INFO com.cisco.pxgrid.ReconnectionManager - Started
Connecting...
Connected
Filters (ex. '1.0.0.0/255.0.0.0,1234::/16,...' or <enter> for no filter): 06:58:08.835 [Thread-1] INFO com.cisco.pxgrid.ReconnectionManager - Connected
press <enter> to disconnect...session notification:
Session={ip=[10.0.0.15], Audit Session Id=0A0000020000000F006EE7E0, User Name=host/jeppich-PC.lab6.com, AD User DNS Domain=null, AD Host DNS Domain=lab6.com, AD User NetBIOS Name=null, AD Host NETBIOS Name=LAB6, Calling station id=00:0C:29:79:02:A8, Session state=STARTED, ANCstatus=null, Security Group=null, Endpoint Profile=Add_Device, NAS IP=10.0.0.2, NAS Port=GigabitEthernet1/0/43, RADIUSAVPairs=[ Acct-Session-Id=00000009], Posture Status=null, Posture Timestamp=, Session Last Update Time=Tue Jul 28 07:57:25 EDT 2015}
session notification:
Session={ip=[10.0.0.15], Audit Session Id=0A0000020000000F006EE7E0, User Name=LAB6\jeppich, AD User DNS Domain=lab6.com, AD Host DNS Domain=null, AD User NetBIOS Name=LAB6, AD Host NETBIOS Name=null, Calling station id=00:0C:29:79:02:A8, Session state=STARTED, ANCstatus=null, Security Group=null, Endpoint Profile=Add_Device, NAS IP=10.0.0.2, NAS Port=GigabitEthernet1/0/43, RADIUSAVPairs=[ Acct-Session-Id=00000009], Posture Status=null, Posture Timestamp=, Session Last Update Time=Tue Jul 28 07:57:56 EDT 2015}
session notification:
Session={ip=[10.0.0.15], Audit Session Id=0A0000020000000F006EE7E0, User Name=host/jeppich-PC.lab6.com, AD User DNS Domain=null, AD Host DNS Domain=lab6.com, AD User NetBIOS Name=null, AD Host NETBIOS Name=LAB6, Calling station id=00:0C:29:79:02:A8, Session state=STARTED, ANCstatus=null, Security Group=null, Endpoint Profile=Add_Device, NAS IP=10.0.0.2, NAS Port=GigabitEthernet1/0/43, RADIUSAVPairs=[ Acct-Session-Id=00000009], Posture Status=null, Posture Timestamp=, Session Last Update Time=Tue Jul 28 07:59:17 EDT 2015}