VEN Operations Reference
This topic contains parameters and examples for VEN operations.
VEN Parameters
Parameter | Description | Type | Required |
---|---|---|---|
| Organization ID | Integer | Yes |
| The method by which the VEN was activated | String | No |
| FQDN of the PCE | String | No |
| Return VENs in or not in authentication recovery. | Boolean | No |
| A specific error condition to filter by | String | No |
| The array of container cluster URIs, encoded as a JSON string | Object | No |
| Return VENs that have been disconnected since the given time. | date/time | No |
| The overall health (condition) of the VEN | String | No |
| The hostname of VEN(s) to return. Supports partial matches. | String | No |
| IP address of VEN(s) to return. Supports partial matches | String | No |
| The time (rfc3339 timestamp) of the last goodbye from the VEN. | String, Null | |
| OS platform of the host managed by the VEN | String, Null | |
| Software version of the VEN. | String | |
| The current status of the VEN. Options are: "active", "suspended", "uninstalled." | String | |
| The method in which the VEN was activated. Options are: "pairing_key", "kerberos", "certificate." | String, Null | No |
| The FQDN of the PCE that the VEN last connected to | String, Null | No |
| cluster FQDN for target PCE | String, Null | |
| Labels assigned to the host that are managed by the VEN. | Array | |
| Network interfaces of the host that are managed by the VEN. | Array | |
| The only required property is
| Array | |
| Description of VEN(s) to return. Supports partial matches | String, Null | |
| The last time (rfc3339 timestamp) a heartbeat was received from this VEN. | String, Null | |
| VEN Status:
| String | |
| The | String | No |
VEN Properties
Parameter | Description | Type | Required |
---|---|---|---|
| The type of the release marked as default: "server", "endpoint" | String | No |
| The type of the release marked as default | String | |
| Friendly name for the VEN | String, Null | |
| The hostname of the host managed by the VEN | String, Null | Yes |
| The unique ID of the host managed by the VEN | String, Null | |
| OS identifier of the host managed by the VEN | String, Null | |
| Additional OS details from the host managed by the VEN | Sring, Null | |
| OS platform of the host managed by the VEN | String, Null | |
| Software version of the VEN. | String | |
| The current status of the VEN. Options are: "active", "suspended", "uninstalled" | String | |
| The method in which the VEN was activated. Options are: "pairing_key", "kerberos", "certificate" | String, Null | No |
| The FQDN of the PCE that the VEN last connected to | String, Null | No |
| cluster FQDN for target PCE | String, Null | |
| Labels assigned to the host managed by the VEN. | Array | |
| Network interfaces of the host managed by the VEN. | Array | |
| The only required property is
| Array | |
| The array of container cluster URIs, encoded as a JSON string | Object | No |
| The issuer name match the criteria for the certificate used when establishing secure connections. | Object, Null | |
| The last time (rfc3339 timestamp), a heartbeat was received from this VEN. | String, Null | |
| The time (rfc3339 timestamp) of the last goodbye from the VEN. | String, Null | |
| VEN Status:
| String | |
| Return VENs that have been disconnected since the given time. | date/time | |
| The overall health (condition) of the VEN | String | |
| IP address of VEN(s) to return. Supports partial matches | String | |
| The strategy to use to restore the firewall state after the VEN is uninstalled. The strategy to use to restore the firewall state after the VEN is uninstalled: Options are: The default is: Works with | String | |
| VEN ID (works with | String | |
| VENs to unpair (works with Required property: | Array | Yes |
| Property: Issuer name match criteria for certificate used during establishing secure connections.
| Object String | |
| Last reported time when policy was applied to the workload (UTC), only present in expanded representations. |
| |
| Last reported time when policy was received by the workload (UTC), only present in expanded representations. |
Null | |
| Policy enforcement mode, only present in expanded representations. Options are: "idle", "visibility_only", "full", "selective" | String | |
| The amount of data the VEN collects and reports to the PCE from a resource demands on workloads. The higher levels of detail are useful for visualizing traffic flows in the Illumination map inside the PCE web console. If this parameter is not set, then VEN visibility level is set to
| String | |
| Only return VENs with/without a pending upgrade. | Boolean | No |
| The | String | No |
| The time (rfc3339 timestamp) at which the PCE stops attempting VEN upgrade | String. Null | No |
| The software release to upgrade to | String, Null | No |
| Number of seconds during which the PCE tries to trigger the agent upgrade: "minimum": 900, "maximum": 15552000 | Integer |
Curl Command to Get VENs with a Specific Label
curl -i -X GET https://pce.my-company.com:8443/api/v2/orgs/2/vens?labels="[[/orgs/2/labels/1642]]" -H "Accept: application/json" -u $KEY:$TOKEN
To restrict the type of VENs you want to be returned and set a limit on how many results you want to be returned, use the relevant query parameters. For example, you might want to get a collection of no more than 50 VENs running CentOS 6.3 with active status.
Curl Command to Get VENs using other Query Parameters
curl -i -X GET https://pce.my-company.com:8443/api/v2/orgs/2/vens?os_id=centos-x86_64-6.3&max_results=50&status=active -H "Accept: application/json"-u $KEY:$TOKEN
Unpairing and Suspending VENs
Instead of unpairing and suspending workloads, use the new VEN APIs to unpair and suspend VENs.
Note
The endpoint workloads/unpair
is DEPRECATED. Use /vens/unpair
instead.
Curl Command for Unpairing VENs
curl -i -X PUT https://pce.my-company.com/api/v2/orgs/3/vens/unpair -H "Content -Type:application/json" -u $KEY:$TOKEN -d '{"vens": [{"href": "/orgs/7/vens/xxxxxxxx-9611-44aa-ae06-fXXX8903db65"}, {"href": "/orgs/7/vens/xxxxxxxx-9611-xxxx-ae06-f7bXXX03db71"}], "firewall_restore": "default"}'
Curl Command to Mark VEN as Suspended
curl -i -X PUT https://pce.my-company.com/api/v2/orgs/3/vens/xxxxxxxx-9611-xxxx-ae06-f7bXXX03db71 -H "Content-Type:application/json" -u $KEY:$TOKEN -d'{"status":"suspended"}'