netbox-cisco-ise 0.1.5__py3-none-any.whl → 0.1.7__py3-none-any.whl

netbox_cisco_ise/__init__.py

@@ -5,9 +5,13 @@ Display Cisco Identity Services Engine (ISE) endpoint and NAD information in Dev
 Shows endpoint identity, profiling data, active session status, and network access device details.
 """
 
+import logging
+
 from netbox.plugins import PluginConfig
 
-__version__ = "0.1.5"
+__version__ = "0.1.7"
+
+logger = logging.getLogger(__name__)
 
 
 class CiscoISEConfig(PluginConfig):
@@ -54,7 +58,80 @@ class CiscoISEConfig(PluginConfig):
                 "lookup": "nad",
             },  # Default: Cisco devices as NADs
         ],
+        # Endpoint mappings (requires netbox-endpoints plugin)
+        # Format: list of dicts with manufacturer (regex), endpoint_type (regex, optional)
+        # All endpoints use MAC lookup since they're endpoint devices
+        #
+        # Example:
+        # "endpoint_mappings": [
+        #     {"manufacturer": "vocera"},  # All Vocera endpoints
+        #     {"manufacturer": "cisco", "endpoint_type": ".*phone.*"},  # Cisco phones
+        # ]
+        # If empty, shows tab for ALL endpoints with a MAC address
+        "endpoint_mappings": [],
     }
 
+    def ready(self):
+        """Register endpoint view if netbox_endpoints is available."""
+        super().ready()
+        self._register_endpoint_views()
+
+    def _register_endpoint_views(self):
+        """Register Cisco ISE tab for Endpoints if plugin is installed."""
+        import sys
+
+        # Quick check if netbox_endpoints is available
+        if "netbox_endpoints" not in sys.modules:
+            try:
+                import importlib.util
+
+                if importlib.util.find_spec("netbox_endpoints") is None:
+                    logger.debug("netbox_endpoints not installed, skipping endpoint view registration")
+                    return
+            except Exception:
+                logger.debug("netbox_endpoints not available, skipping endpoint view registration")
+                return
+
+        try:
+            from django.shortcuts import render
+            from netbox.views import generic
+            from netbox_endpoints.models import Endpoint
+            from utilities.views import ViewTab, register_model_view
+
+            from .views import should_show_ise_tab_endpoint
+
+            @register_model_view(Endpoint, name="cisco_ise", path="cisco-ise")
+            class EndpointISEView(generic.ObjectView):
+                """Display Cisco ISE endpoint details for a netbox Endpoint."""
+
+                queryset = Endpoint.objects.all()
+                template_name = "netbox_cisco_ise/netbox_endpoint_tab.html"
+
+                tab = ViewTab(
+                    label="Cisco ISE",
+                    weight=9001,
+                    permission="netbox_endpoints.view_endpoint",
+                    hide_if_empty=False,
+                    visible=should_show_ise_tab_endpoint,
+                )
+
+                def get(self, request, pk):
+                    endpoint = Endpoint.objects.get(pk=pk)
+                    return render(
+                        request,
+                        self.template_name,
+                        {
+                            "object": endpoint,
+                            "tab": self.tab,
+                            "loading": True,
+                        },
+                    )
+
+            logger.info("Registered Cisco ISE tab for Endpoint model")
+        except ImportError:
+            logger.debug("netbox_endpoints not installed, skipping endpoint view registration")
+        except Exception as e:
+            logger.warning(f"Could not register endpoint views: {e}")
+
 
 config = CiscoISEConfig

netbox_cisco_ise/ise_client.py

@@ -275,9 +275,7 @@ class ISEClient:
             cached["cached"] = True
             return cached
 
-        result = self._make_ers_request(
-            "/networkdevice", params={"filter": f"ipaddress.EQ.{ip_address}"}
-        )
+        result = self._make_ers_request("/networkdevice", params={"filter": f"ipaddress.EQ.{ip_address}"})
 
         return self._process_nad_result(result, cache_key)
 
@@ -297,9 +295,7 @@ class ISEClient:
             cached["cached"] = True
             return cached
 
-        result = self._make_ers_request(
-            "/networkdevice", params={"filter": f"name.CONTAINS.{name}"}
-        )
+        result = self._make_ers_request("/networkdevice", params={"filter": f"name.CONTAINS.{name}"})
 
         return self._process_nad_result(result, cache_key)
 
@@ -365,11 +361,7 @@ class ISEClient:
                 "ro_community": bool(snmp_settings.get("roCommunity")),
                 "polling_interval": snmp_settings.get("pollingInterval"),
             },
-            "trustsec_enabled": bool(
-                trustsec_settings.get("deviceAuthenticationSettings", {}).get(
-                    "sgaDeviceId"
-                )
-            ),
+            "trustsec_enabled": bool(trustsec_settings.get("deviceAuthenticationSettings", {}).get("sgaDeviceId")),
             "coA_port": nad.get("coaPort"),
             "cached": False,
         }

netbox_cisco_ise/templates/netbox_cisco_ise/netbox_endpoint_tab.html

@@ -0,0 +1,24 @@
+{% extends 'netbox_endpoints/endpoint.html' %}
+{% load helpers %}
+
+{% block content %}
+{% if loading %}
+<div id="ise-content"
+     hx-get="{% url 'plugins:netbox_cisco_ise:endpoint_content' pk=object.pk %}"
+     hx-trigger="load"
+     hx-swap="innerHTML">
+    <div class="d-flex justify-content-center align-items-center py-5">
+        <div class="text-center">
+            <div class="spinner-border text-primary mb-3" role="status" style="width: 3rem; height: 3rem;">
+                <span class="visually-hidden">Loading...</span>
+            </div>
+            <p class="text-muted mb-0">Loading Cisco ISE data...</p>
+        </div>
+    </div>
+</div>
+{% elif error %}
+<div class="alert alert-warning">
+    <i class="mdi mdi-alert"></i> {{ error }}
+</div>
+{% endif %}
+{% endblock %}

netbox_cisco_ise/urls.py

@@ -4,10 +4,18 @@ URL routing for NetBox Cisco ISE Plugin
 
 from django.urls import path
 
-from .views import DeviceISEContentView, ISESettingsView, TestConnectionView
+from .views import ENDPOINTS_PLUGIN_INSTALLED, DeviceISEContentView, ISESettingsView, TestConnectionView
 
 urlpatterns = [
     path("settings/", ISESettingsView.as_view(), name="settings"),
     path("test-connection/", TestConnectionView.as_view(), name="test_connection"),
     path("device/<int:pk>/content/", DeviceISEContentView.as_view(), name="device_content"),
 ]
+
+# Add endpoint URLs if netbox_endpoints is installed
+if ENDPOINTS_PLUGIN_INSTALLED:
+    from .views import EndpointISEContentView
+
+    urlpatterns.append(
+        path("endpoint/<int:pk>/content/", EndpointISEContentView.as_view(), name="endpoint_content"),
+    )

netbox_cisco_ise/views.py

@@ -19,6 +19,14 @@ from utilities.views import ViewTab, register_model_view
 
 from .ise_client import get_client
 
+# Check if netbox_endpoints plugin is installed
+try:
+    from netbox_endpoints.models import Endpoint
+
+    ENDPOINTS_PLUGIN_INSTALLED = True
+except ImportError:
+    ENDPOINTS_PLUGIN_INSTALLED = False
+
 
 def is_valid_mac(value):
     """Check if a value looks like a MAC address."""
@@ -53,18 +61,10 @@ def get_device_lookup_method(device):
 
     # Get device info for matching
     manufacturer = device.device_type.manufacturer
-    manufacturer_slug = (
-        manufacturer.slug.lower() if manufacturer and manufacturer.slug else ""
-    )
-    manufacturer_name = (
-        manufacturer.name.lower() if manufacturer and manufacturer.name else ""
-    )
-    device_type_slug = (
-        device.device_type.slug.lower() if device.device_type.slug else ""
-    )
-    device_type_model = (
-        device.device_type.model.lower() if device.device_type.model else ""
-    )
+    manufacturer_slug = manufacturer.slug.lower() if manufacturer and manufacturer.slug else ""
+    manufacturer_name = manufacturer.name.lower() if manufacturer and manufacturer.name else ""
+    device_type_slug = device.device_type.slug.lower() if device.device_type.slug else ""
+    device_type_model = device.device_type.model.lower() if device.device_type.model else ""
 
     # Check each mapping
     for mapping in mappings:
@@ -76,15 +76,12 @@ def get_device_lookup_method(device):
         manufacturer_match = False
         if manufacturer_pattern:
             try:
-                if re.search(
-                    manufacturer_pattern, manufacturer_slug, re.IGNORECASE
-                ) or re.search(manufacturer_pattern, manufacturer_name, re.IGNORECASE):
+                if re.search(manufacturer_pattern, manufacturer_slug, re.IGNORECASE) or re.search(
+                    manufacturer_pattern, manufacturer_name, re.IGNORECASE
+                ):
                     manufacturer_match = True
             except re.error:
-                if (
-                    manufacturer_pattern in manufacturer_slug
-                    or manufacturer_pattern in manufacturer_name
-                ):
+                if manufacturer_pattern in manufacturer_slug or manufacturer_pattern in manufacturer_name:
                     manufacturer_match = True
 
         if not manufacturer_match:
@@ -94,15 +91,12 @@ def get_device_lookup_method(device):
         if device_type_pattern:
             device_type_match = False
             try:
-                if re.search(
-                    device_type_pattern, device_type_slug, re.IGNORECASE
-                ) or re.search(device_type_pattern, device_type_model, re.IGNORECASE):
+                if re.search(device_type_pattern, device_type_slug, re.IGNORECASE) or re.search(
+                    device_type_pattern, device_type_model, re.IGNORECASE
+                ):
                     device_type_match = True
             except re.error:
-                if (
-                    device_type_pattern in device_type_slug
-                    or device_type_pattern in device_type_model
-                ):
+                if device_type_pattern in device_type_slug or device_type_pattern in device_type_model:
                     device_type_match = True
 
             if not device_type_match:
@@ -169,11 +163,7 @@ class DeviceISEContentView(LoginRequiredMixin, PermissionRequiredMixin, View):
 
     def get(self, request, pk):
         """Fetch ISE data and return HTML content."""
-        device = (
-            Device.objects.select_related("device_type__manufacturer")
-            .prefetch_related("interfaces")
-            .get(pk=pk)
-        )
+        device = Device.objects.select_related("device_type__manufacturer").prefetch_related("interfaces").get(pk=pk)
 
         client = get_client()
         config = settings.PLUGINS_CONFIG.get("netbox_cisco_ise", {})
@@ -195,10 +185,7 @@ class DeviceISEContentView(LoginRequiredMixin, PermissionRequiredMixin, View):
                     if "error" not in ise_data:
                         # Also get session data for connected endpoints
                         session_data = client.get_active_session_by_mac(mac_address)
-                        if (
-                            "error" in session_data
-                            and session_data.get("connected") is False
-                        ):
+                        if "error" in session_data and session_data.get("connected") is False:
                             # Not connected is fine, just no active session
                             pass
                     else:
@@ -220,11 +207,7 @@ class DeviceISEContentView(LoginRequiredMixin, PermissionRequiredMixin, View):
 
                 # If IP lookup failed or no IP, try hostname
                 # Use VC name for virtual chassis members (original hostname)
-                lookup_hostname = (
-                    device.virtual_chassis.name
-                    if device.virtual_chassis
-                    else device.name
-                )
+                lookup_hostname = device.virtual_chassis.name if device.virtual_chassis else device.name
                 if ("error" in ise_data or not ise_data) and lookup_hostname:
                     ise_data = client.get_network_device_by_name(lookup_hostname)
 
@@ -298,3 +281,130 @@ class TestConnectionView(View):
             return JsonResponse(result, status=400)
 
         return JsonResponse(result)
+
+
+# Endpoint-specific functions for netbox_endpoints plugin
+def should_show_ise_tab_endpoint(endpoint):
+    """
+    Determine if the ISE tab should be visible for this endpoint.
+
+    Shows tab if endpoint has a MAC address and matches configured endpoint_mappings
+    (or if endpoint_mappings is empty, show for all endpoints with MAC).
+    """
+    if not ENDPOINTS_PLUGIN_INSTALLED:
+        return False
+
+    # Must have MAC address for ISE lookup
+    if not endpoint.mac_address:
+        return False
+
+    config = settings.PLUGINS_CONFIG.get("netbox_cisco_ise", {})
+    mappings = config.get("endpoint_mappings", [])
+
+    # If no mappings configured, show for all endpoints with MAC
+    if not mappings:
+        return True
+
+    # Check if endpoint matches any mapping
+    if not endpoint.endpoint_type:
+        return False
+
+    manufacturer = endpoint.endpoint_type.manufacturer
+    manufacturer_slug = manufacturer.slug.lower() if manufacturer and manufacturer.slug else ""
+    manufacturer_name = manufacturer.name.lower() if manufacturer and manufacturer.name else ""
+    endpoint_type_slug = endpoint.endpoint_type.slug.lower() if endpoint.endpoint_type.slug else ""
+    endpoint_type_model = endpoint.endpoint_type.model.lower() if endpoint.endpoint_type.model else ""
+
+    for mapping in mappings:
+        manufacturer_pattern = mapping.get("manufacturer", "").lower()
+        endpoint_type_pattern = mapping.get("endpoint_type", "").lower()
+
+        # Check manufacturer match
+        manufacturer_match = False
+        if manufacturer_pattern:
+            try:
+                if re.search(manufacturer_pattern, manufacturer_slug, re.IGNORECASE) or re.search(
+                    manufacturer_pattern, manufacturer_name, re.IGNORECASE
+                ):
+                    manufacturer_match = True
+            except re.error:
+                if manufacturer_pattern in manufacturer_slug or manufacturer_pattern in manufacturer_name:
+                    manufacturer_match = True
+
+        if not manufacturer_match:
+            continue
+
+        # Check endpoint_type match if specified
+        if endpoint_type_pattern:
+            endpoint_type_match = False
+            try:
+                if re.search(endpoint_type_pattern, endpoint_type_slug, re.IGNORECASE) or re.search(
+                    endpoint_type_pattern, endpoint_type_model, re.IGNORECASE
+                ):
+                    endpoint_type_match = True
+            except re.error:
+                if endpoint_type_pattern in endpoint_type_slug or endpoint_type_pattern in endpoint_type_model:
+                    endpoint_type_match = True
+
+            if not endpoint_type_match:
+                continue
+
+        # Mapping matches
+        return True
+
+    return False
+
+
+# Endpoint views - only available if netbox_endpoints is installed
+if ENDPOINTS_PLUGIN_INSTALLED:
+
+    class EndpointISEContentView(LoginRequiredMixin, PermissionRequiredMixin, View):
+        """HTMX endpoint that returns ISE content for netbox Endpoint async loading."""
+
+        permission_required = "netbox_endpoints.view_endpoint"
+
+        def get(self, request, pk):
+            """Fetch ISE data and return HTML content."""
+            endpoint = Endpoint.objects.select_related("endpoint_type__manufacturer").get(pk=pk)
+
+            client = get_client()
+            config = settings.PLUGINS_CONFIG.get("netbox_cisco_ise", {})
+
+            ise_data = {}
+            session_data = {}
+            error = None
+
+            if not client:
+                error = "Cisco ISE not configured. Configure the plugin in NetBox settings."
+            elif not endpoint.mac_address:
+                error = "No MAC address configured for this endpoint."
+            else:
+                # Endpoint lookup by MAC address
+                mac_address = str(endpoint.mac_address)
+                ise_data = client.get_endpoint_by_mac(mac_address)
+                if "error" not in ise_data:
+                    # Also get session data for connected endpoints
+                    session_data = client.get_active_session_by_mac(mac_address)
+                    if "error" in session_data and session_data.get("connected") is False:
+                        # Not connected is fine, just no active session
+                        pass
+                else:
+                    error = ise_data.get("error")
+                    ise_data = {}
+
+            # Get ISE URL for external links
+            ise_url = config.get("ise_url", "").rstrip("/")
+
+            return HttpResponse(
+                render_to_string(
+                    "netbox_cisco_ise/endpoint_tab_content.html",
+                    {
+                        "object": endpoint,
+                        "ise_data": ise_data,
+                        "session_data": session_data,
+                        "error": error,
+                        "ise_url": ise_url,
+                    },
+                    request=request,
+                )
+            )

{netbox_cisco_ise-0.1.5.dist-info → netbox_cisco_ise-0.1.7.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: netbox-cisco-ise
-Version: 0.1.5
+Version: 0.1.7
 Summary: NetBox plugin for Cisco ISE integration - endpoint tracking, NAD management, and session visibility
 Author-email: sieteunoseis <jeremy.worden@gmail.com>
 License: Apache-2.0

{netbox_cisco_ise-0.1.5.dist-info → netbox_cisco_ise-0.1.7.dist-info}/RECORD

@@ -1,16 +1,17 @@
-netbox_cisco_ise/__init__.py,sha256=mDr1fM2VKoi_YUH2qOAo-CjZIdODiteLZtD_G9O-hKc,2203
-netbox_cisco_ise/ise_client.py,sha256=sfeC-cLv0JWo_NdxZG9M4VEGNyLYCVymB6iItGCUvH8,16403
+netbox_cisco_ise/__init__.py,sha256=ZSzSxpy3uFtG427NwWnYD_fZt0_TGRirS0GZxR_KJsc,5267
+netbox_cisco_ise/ise_client.py,sha256=sFK2UUYN8tvUpxjQxdd6BbU5H01NF3E65kQUAzI69k0,16291
 netbox_cisco_ise/navigation.py,sha256=mMN4EyzZl6ehoqflLeYy7logt39wpCN2TEsPfqn1VtI,507
-netbox_cisco_ise/urls.py,sha256=MOGyzDEUw4RTbRwceIfTdSw86THx18zJ0ZAUwt4LDKQ,419
-netbox_cisco_ise/views.py,sha256=s63WhYdAlhzoiOgSEw8cjjzkUuoHTgIjdPgA_uh7TDQ,10253
+netbox_cisco_ise/urls.py,sha256=qlIlqkj4jYeDSiWnMDl7dGfoQTvWgigbahUOPUA4tkU,712
+netbox_cisco_ise/views.py,sha256=oay16jnmS-ZWhT9XYSnvbRvWYEoTvZ1s8-wHaczZfF4,15031
 netbox_cisco_ise/templates/netbox_cisco_ise/device_tab.html,sha256=H8xS-cwU-oOCS7Sgo3RMD01UDnqrIKR2KU3G-GyR9O0,775
 netbox_cisco_ise/templates/netbox_cisco_ise/endpoint_tab.html,sha256=aS7R0oTjkUmqlP7i2zfrFhYs9F-LknJgcomGGK60u7w,9868
 netbox_cisco_ise/templates/netbox_cisco_ise/endpoint_tab_content.html,sha256=Cn3JDGVLcUv7u9pgK867nDdLBPPdY1ViGsr5KewDuRE,9795
 netbox_cisco_ise/templates/netbox_cisco_ise/nad_tab.html,sha256=Y5rCGyoSqzRmfridJp2BmC3HkPGRhvWdZ3Mp-C81qYk,8783
 netbox_cisco_ise/templates/netbox_cisco_ise/nad_tab_content.html,sha256=0KyCQ1E1hTC3gD_T4FuC_Ll8cuPVVji_ofqCCrTJxHk,8710
+netbox_cisco_ise/templates/netbox_cisco_ise/netbox_endpoint_tab.html,sha256=fMHwjCz_dXa-nSelZdFP0LLpj62WAh1EU-eaMY6xEps,786
 netbox_cisco_ise/templates/netbox_cisco_ise/settings.html,sha256=ZsnJ_AclJUDa-h7vJTd5Clh7pc3OOBx6Tf9Y_bx3oIE,8953
-netbox_cisco_ise-0.1.5.dist-info/licenses/LICENSE,sha256=KmjHs19UP3vo7K2IWXkq3JDKG9PatSbqeLPwu3o2k7g,10761
-netbox_cisco_ise-0.1.5.dist-info/METADATA,sha256=Yz0WsrapLikpia7TOXU0IjfMWwHNtuue1ERqqQwrPS0,9099
-netbox_cisco_ise-0.1.5.dist-info/WHEEL,sha256=wUyA8OaulRlbfwMtmQsvNngGrxQHAvkKcvRmdizlJi0,92
-netbox_cisco_ise-0.1.5.dist-info/top_level.txt,sha256=LMP1ppZRzqtdaMGzz53KgacW_PEwyLSM9wwIMuBvJ00,17
-netbox_cisco_ise-0.1.5.dist-info/RECORD,,
+netbox_cisco_ise-0.1.7.dist-info/licenses/LICENSE,sha256=KmjHs19UP3vo7K2IWXkq3JDKG9PatSbqeLPwu3o2k7g,10761
+netbox_cisco_ise-0.1.7.dist-info/METADATA,sha256=yxm1emfd_6dqWy_gDbLF6Pl5HwlSWUfdmBSomzx37vM,9099
+netbox_cisco_ise-0.1.7.dist-info/WHEEL,sha256=wUyA8OaulRlbfwMtmQsvNngGrxQHAvkKcvRmdizlJi0,92
+netbox_cisco_ise-0.1.7.dist-info/top_level.txt,sha256=LMP1ppZRzqtdaMGzz53KgacW_PEwyLSM9wwIMuBvJ00,17
+netbox_cisco_ise-0.1.7.dist-info/RECORD,,