API Change Log in May 2025

This topic lists the APIs updated in this release.

New MRT APIs

Table 1: New MRT APIs

Method

Path

Description

Monitoring > Access Points

GET

/network-monitoring/v1alpha1/aps/{serial-number}/radios

This API is used to fetch a list of radios associated to an access point. The response body includes comprehensive details like MAC address, band, status, and its current statistics for each radio in the list.

GET

/network-monitoring/v1alpha1/aps/{serial-number}/ports

This API is used to fetch a list of ports associated to an access point. The response includes comprehensive details like MAC address, port index, and status for each port in the list.

GET

/network-monitoring/v1alpha1/aps/{serial-number}/wlans

This API is used to fetch a list of WLANs associated to an access point. The response includes WLAN name and security type for each WLAN in the list.

GET

/network-monitoring/v1alpha1/aps/{serial-number}/tunnels

This API is used to fetch a list of tunnels associated with a specific access point, based on the provided query parameters.

GET

/network-monitoring/v1alpha1/aps/{serial-number}/tunnels/{tunnel-id}

This API is used to fetch detailed information about tunnels associated with a specific access point. It provides tunnel-related details such as name, status, encapsulation type, source, and destination information based on the access point’s serial number.

GET

/network-monitoring/v1alpha1/aps/{serial-number}/tunnels/{tunnel-id}/throughput-trends

This API is used to fetch information about throughput trend data for a specific tunnel of an access point, including transmitted and received data in bits per second. If no timestamp range is specified in the filter, data for the last 3 hours will be returned by default.

GET

/network-monitoring/v1alpha1/aps/{serial-number}/tunnels/{tunnel-id}/packet-loss-trends

This API is used to fetch information about packet loss trend data for a specific tunnel of an access point. If no timestamp range is specified in the filter, data for the last 3 hours will be returned by default.

GET

/network-monitoring/v1alpha1/aps/{serial-number}/tunnels/{tunnel-id}/jitter-trends

This API is used to fetch information about jitter trend data for a specific tunnel of an access point. If no timestamp range is specified in the filter, data for the last 3 hours will be returned by default.

GET

/network-monitoring/v1alpha1/aps/{serial-number}/tunnels/{tunnel-id}/latency-trends

This API is used to fetch information about latency trend data for a specific tunnel of an access point. If no timestamp range is specified in the filter, data for the last 3 hours will be returned by default.

GET

/network-monitoring/v1alpha1/aps/{serial-number}/tunnels/{tunnel-id}/mos-trends

This API is used to fetch information about MOS score trend data for a specific tunnel of an access point. If no timestamp range is specified in the filter, data for the last 3 hours will be returned by default.

Monitoring > Devices

GET

/network-monitoring/v1alpha1/v1alpha1/device-inventory

This API endpoint is used to fetch a list of network devices that are present in inventory, such as access points, switches, and gateways. The API includes devices yet to be onboarded, as well as those already onboarded and currently being monitored by the system.

New Configuration APIs

Table 2: New Configuration APIs

Method

Path

Description

Security > AAA Captive Portal

GET

/network-config/v1alpha1/captive-portal

 

The GET API call is used to fetch the list of all external captive portal profiles for guest users.

GET, POST, PATCH, or DELETE

/network-config/v1alpha1/captive-portal/{name}

These APIs are used to fetch, create, or update the parameters related to an external captive portal profile.

The delete API is used to delete the external captive profile.

Security > Aaa Dot1xsupp

GET

/network-config/v1alpha1/dot1xsupp

This API is used to fetch the list of all configured 802.1X supplicant profiles.

 

GET, POST, PATCH, or DELETE

/network-config/v1alpha1/dot1xsupp/{name}

These APIs are used to fetch, create, configure, or delete a specific 802.1X supplicant profile.

System > AP System

GET

/network-config/v1alpha1/ap-system

The GET API call is used to fetch the list of all configured AP system profiles.

GET, POST, PATCH, and DELETE

/network-config/v1alpha1/ap-system/{name}

These APIs are used to fetch, create, configure, update, or delete a specific AP system profile.

Interfaces > AP Port Profile

GET

/network-config/v1alpha1/ap-port-profiles

This API is used to fetch the list of all existing AP port profiles. The port profiles configuration parameters include VLAN settings, authentication methods, link speed, PoE settings, etc.

GET, POST, PATCH, and DELETE

/network-config/v1alpha1/ap-port-profiles/{profileName}

These APIs are used to fetch, create, update, or delete parameters related to a specific AP port profile.

VLAN & Networks > Named VLAN

GET

/network-config/v1alpha1/named-vlan

This API is used to fetch the list of named-VLAN or VLAN-Group profiles and the configured parameters.

GET, POST, PATCH, and DELETE

/network-config/v1alpha1/named-vlan{name}

These APIs are used to fetch, create, update, or delete parameters related to a specific named-VLAN or VLAN-Group profiles. List of VLAN IDs can be added to a named-vlan profile.

Named Object > Aliases

GET

/network-config/v1alpha1/aliases

This API is used to fetch the list of all configured aliases profiles.

GET, POST, PATCH, or DELETE

/network-config/v1alpha1/aliases/{name}

These APIs are used to fetch, create, update, or delete the parameters related to the specified aliases profile. For POST API calls, the behavior of the alias gets updated instead of replaced.

Named Object > Net Service

GET

/network-config/v1alpha1/net-services

This API is used to fetch the list of all configured net services.

GET, POST, PATCH, or DELETE

/network-config/v1alpha1/net-services/{name}

These APIs are used to fetch, create, update, or delete parameters related to specific net services configured.

If Null is entered as a parameter value, then the parameter is deleted.

Roles & Policy > Policy Group

GET, POST, PATCH, and DELETE

/network-config/v1alpha1/policy-groups

This API is used to fetch, create, update, or delete the list of all configured policy group container.

Roles & Policy > Policy

GET

/network-config/v1alpha1/policies

These APIs are used to fetch, create, or update the list of all configured policies.

GET, POST, PATCH, and DELETE

/network-config/v1alpha1/policies/{name}

These APIs are used to fetch, create, update, or delete the parameters related to a specific policy name.

If Null is entered as a parameter value, then the parameter is deleted.

Roles & Policy > Role Gpid

GET

/network-config/v1alpha1/role-gpids

This API is used to fetch the list of all the configured role and its associated GPID.

GET, POST, PATCH, and DELETE

/network-config/v1alpha1/role-gpids/{name}

These APIs are used to fetch, create, update, or delete the parameters related to a specific role and GPID.

Roles & Policy > Roles

GET

/network-config/v1alpha1/roles

This API is used to fetch the list of roles configured. Role is a feature that allows administrators to assign network access to clients. The network admin can create configuration profiles(roles), associate them to clients and configure various parameters of role that are supported.

GET, POST, PATCH, and DELETE

/network-config/v1alpha1/roles/{name}

These APIs are used to fetch, create, update, or delete the parameters related to a specific role name.

Scope Management > Sites

GET, POST, PUT, and DELETE

/network-config/v1alpha1/sites

These APIs are used to fetch, create, replace, or delete a site.

On successful site creation, the response body displays the scope id of the newly created site.

The GET call supports the following options:

  • Search—Partial or full string free text search.

  • Sort—To sort a field based on ascending or descending order, use ASC or DESC keywords respectively. The sort option is supported on the following fields:

    • scopeName

    • address

    • state

    • country

    • city

    • deviceCount

    • collectionName

    • zipcode

    • timezone

    • latitude

    • longitude

    For example, sort=deviceCount DESC.

  • Filter—To filter the list, you must use the ODATA 4.0 filter format. The filter option is supported on the following fields:

    • scopeName

    • address

    • city

    • state

    • country

    • zipcode

    • collectionName

    For example, filter=country eq 'India' and city in ('Bengaluru','Chennai')

Scope Management > Site Collections

GET, POST, PUT, and DELETE

/network-config/v1alpha1/site-collections

These APIs are used to fetch, create, update, or delete a site collection. The site collection can be created with or without sites in the request body.

This GET API call is used to fetch the list of all site collections and supports the following options:

  • Search—Partial or full string free text search.

  • Sort—To sort a field based on ascending or descending order, use ASC or DESC keywords respectively. The sort option is supported on the following parameters:

    • scopeName

    • description

    • deviceCount

    • siteCount

  • Filter—To filter the list you must use the ODATA 4.0 filter format. The filter option is supported on the following fields:

    • scopeName

    • description

POST

/network-config/v1alpha1/site-collection-add-sites

This API is used to add one or more available sites to existing site collection.

DELETE

/network-config/v1alpha1/site-collection-remove-sites

This API is used to remove one or more available sites to existing site collection.

Scope Management > Device Collections

GET

/network-config/v1alpha1/device-collections

The GET API call is used to fetch a list of devices-groups with its properties.

Scope Management > Hierarchy

GET

/network-config/v1alpha1/hierarchy

The API is used to fetch the hierarchy of given scopeId and its scopeType.

Security > 802dot11k Bcn Rpt Req

GET

/network-config/v1alpha1/bcn-rpt-req-profiles

This API is used to fetch the list of Beacon Report Request profiles.

GET, POST, PATCH, or DELETE

/network-config/v1alpha1/bcn-rpt-req-profiles/{name}

These APIs are used to fetch, create, update, or delete the parameters related to a specific Beacon Report Request profile.

Security > 802dot11k Rrm Ie

GET

/network-config/v1alpha1/rrm-ie-profiles

This API is used to fetch the list of Radio Resource Management (RRM) IE profile.

The Radio Resource Management (RRM) Information Element (IE) is essential for optimizing radio resource allocation in wireless networks. It enhances network performance by managing resources efficiently and ensuring quality of service.

GET, POST, PATCH, or DELETE

/network-config/v1alpha1/rrm-ie-profiles/{name}

These APIs are used to fetch, create, or update parameters related to a specific RRM IE profile.

Security > 802dot11k

GET

/network-config/v1alpha1/dot11k-profiles

This API is used to fetch the list of all 802.11k radio profiles.

The 802.11k protocol provides mechanisms for APs and clients to dynamically measure the available radio resources. In an 802.11k enabled network, APs and clients can send neighbor reports, beacon reports, and link measurement reports to each other.

GET, POST, PATCH, or DELETE

/network-config/v1alpha1/dot11k-profiles/{name}

These APIs are used to fetch, create, or update parameters related to a specific 802.11k radio profile.

Security > Server Groups

GET

/network-config/v1alpha1/server-groups

This API is used to fetch the list of all authentication server groups and the server group configurations.

GET, POST, PATCH, or DELETE

/network-config/v1alpha1/server-groups/{name}

These APIs are used to fetch, create, update, or delete the parameters related to a specific authentication server group.

Security > Auth Server

GET

/network-config/v1alpha1/auth-servers

This API is used to fetch the list of all Auth Servers along with the configured parameters.

GET, POST, PATCH, or DELETE

/network-config/v1alpha1/auth-servers/{name}

These APIs are used to fetch, create, update, or delete parameters to configure a specific authentication server profile.

Security > EST

GET

/network-config/v1alpha1/est-profiles

This API is used to fetch the list of all configured EST profiles along with the configured parameters. Enrollment over Secure Transport (EST) supports automatic enrollment of certificates with the EST Server. The certificates can be enrolled or re-enrolled automatically by configuring an EST profile on the device. Certificate Enrollment with EST allows users to use their own PKI instead of the factory or self-signed certificates available on the Instant AP. The APIs enables the user to have maximum visibility and control over the management of the PKI used and address any issues related to security by themselves in a scaled environment. This feature is applicable for all devices.

GET, POST, PATCH, or DELETE

/network-config/v1alpha1/est-profiles/{name}

These APIs are used to fetch, create, update, or delete a specific EST profile.

Security > Firewall

GET

/network-config/v1alpha1/firewall

This API is used to fetch the list of all the configured firewall profiles.

GET, POST, PATCH, and DELETE

/network-config/v1alpha1/firewall/{name}

These APIs are used to fetch, create, update, or delete parameters related to a specific firewall profile.

Extensions > Extension Vsphere

GET

/network-config/v1alpha1/vsphere-instances

This API is used to fetch list of all configured vSphere instances.

GET, POST, PATCH, and DELETE

/network-config/v1alpha1/vsphere-instances/{name}

These APIs are used to fetch, create, update, or delete parameters related to a specific vSphere Extension-installed instance.

Security > Custom Get Api

GET

/network-config/v1alpha1/custom-get-api

This API is used to fetch the customized APIs.

System > Ddns Http

GET

/network-config/v1alpha1/ddns-http

This API is used to fetch the list of all configured Dynamic DNS (DDNS) profiles supporting proprietary protocols over HTTP(S).

GET, POST, PATCH, and DELETE

/network-config/v1alpha1/ddns-http/{name}

This API is used to fetch, create, update, or delete the parameters related to a specific Dynamic DNS (DDNS) profile that supports proprietary protocols over HTTP(S).

System > Ddns

GET

/network-config/v1alpha1/ddns

This API is used to fetch the list of all configured global Dynamic DNS profile parameters for IETF supported servers.

GET, POST, PATCH, and DELETE

/network-config/v1alpha1/ddns/{name}

These APIs are used to fetch, configure, update, or delete the parameters related to a specified global Dynamic DNS profile that supports the IETF protocol.

System > Ddns

GET

/network-config/v1alpha1/dns

This API is used to fetch the list of DNS profiles along with the configured DNS parameters. The DNS parameters include domain name, DNS resolver, DNS redirect, and DNS static host configurations.

GET, POST, PATCH, and DELETE

/network-config/v1alpha1/dns/{name}

This API is used to fetch, create, update, or delete the DNS parameters for a specific global profile.

System > Http Proxy

GET

/network-config/v1alpha1/http-proxy-servers

This API is used to fetch the list of all configured HTTP proxy server profile. On AP, the HTTP proxy settings are to download the image from the cloud server, or route the web classification queries through the proxy server. On AOS-CX and AOS-S switches, the HTTP proxy configuration is utilized to connect to activate server and Classic Central.

GET, POST, PATCH, and DELETE

/network-config/v1alpha1/http-proxy-servers/{name}

These APIs are used to fetch, create, update, or delete the parameters related to a specific HTTP proxy server profile.

System > IPM

GET

/network-config/v1alpha1/ipm

This API is used to fetch the list of all the configured Intelligent Power Monitoring (IPM) profiles.

GET, POST, PATCH, and DELETE

/network-config/v1alpha1/ipm/{name}

These API are used to fetch, create, update, or deleted parameters related to the configuration of specific IPM profile.

System > Logging

GET

/network-config/v1alpha1/logging

This API is used to fetch the list of all configured logged profiles along with the parameters.

GET, POST, PATCH, and DELETE

/network-config/v1alpha1/logging/{name}

This API is used to fetch, create, update, or delete the parameters related to a specific logging profile by name.

System > Management Users

GET

/network-config/v1alpha1/management-users

This API is used to fetch, create, or update the list of all the configured management users with role and authorization.

GET, POST, PATCH, and DELETE

/network-config/v1alpha1/management-users/{name}

These APIs are used to fetch, create, update, or delete the parameters configuration for a specific management user role.

System > NTP

GET

/network-config/v1alpha1/ntp

This API is used to fetch the list of global profiles configured with NTP parameters.

GET, POST, PATCH, and DELETE

/network-config/v1alpha1/ntp/{name}

These APIs are used to fetch, create, update, or delete parameters related to an NTP profile.

System > Scopemap

GET

/network-config/v1alpha1/scope-maps

This API is used to fetch the configure scope mapping for resources. Configuration resources may be applied within a specific context, identified by a scope and a persona.

GET, POST, PATCH, or DELETE

/network-config/v1alpha1/scope-maps/{scopeName}/{persona}/{resource}

These APIs are used to fetch, create, update, or delete a specific scope maps.

These APIs are supported only if the parameter values defined while creating a scope-map matches.

System > Snmp

GET, POST, or PATCH

/network-config/v1alpha1/snmp

This API is used to fetch the list of configured SNMP profiles.

GET, POST, PATCH, and DELETE

/network-config/v1alpha1/snmp/{name}

These API is used to fetch, create, update, or delete parameters related to a specific SNMP profile.

System > Speed Test

GET

/network-config/v1alpha1/speed-test

This API is used to fetch the list of all configured speed test profiles.

GET, POST, PATCH, or DELETE

/network-config/v1alpha1/speed-test/{name}

These APIs are used to fetch, create, update, or delete the parameters related to a specific speed test profile.

System > Switch System

GET

/network-config/v1alpha1/switch-system

This API is used to fetch the list of all configured switch system profiles.

GET, POST, PATCH, and DELETE

/network-config/v1alpha1/switch-system/{name}

This API is used to fetch, create, update, or delete a specific switch system profiles and switch system profile attributes.

System > Timerange

GET

/network-config/v1alpha1/time-ranges

This API is used to fetch the list of all configured time range profiles along with the profile parameters.

GET, POST, PATCH, and DELETE

/network-config/v1alpha1/time-ranges/{name}

These APIs are used to fetch, create, update, or delete a specific time range profile.

Wireless > Alg

GET

/network-config/v1alpha1/alg

This API is used to fetch list of all configured ALG profiles along with the ALG profile parameters.

GET, POST, PATCH, and DELETE

/network-config/v1alpha1/alg/{name}

These APIs are used to fetch, create, update, or delete parameters related to global ALG profile.

Wireless > Mesh

GET

/network-config/v1alpha1/mesh

This API is used to fetch, create, or update the list all configured mesh profiles along with the profile parameters.

GET, POST, PATCH, and DELETE

/network-config/v1alpha1/mesh/{name}

These APIs are used to fetch, create, update, or delete a mesh profile.

Wireless > Radio

GET, POST, or PATCH

/network-config/v1alpha1/radios

This API is used to fetch the list of all configured radio profiles along with profile parameters.

The wireless access point broadcasts the network over radio frequency (RF) signals which wireless clients connect to. Radio configuration involves setting up and optimizing the various parameters of the AP radio to ensure efficient and reliable wireless communication.

GET, POST, PATCH, and DELETE

/network-config/v1alpha1/radios/{name}

These APIs are used to fetch, create, update, or delete parameters related to the specific radio profile.

Wireless > WLAN

GET

/network-config/v1alpha1/wlan-ssids

This API is used to fetch the list of all configured WLAN SSID profiles along with the profile parameters.

GET, POST, PATCH, and DELETE

/network-config/v1alpha1/wlan-ssids/{ssid}

These APIs are used to fetch, create, update, or delete the parameters related to a specified WLAN SSID profile.

Note:

Deleting a WLAN SSID profile using the DELETE /network-config/v1alpha1/wlan-ssids/{ssid} API does not remove the associated system-generated profiles. You must first delete the Overlay WLAN objects by executing the DELETE /network-config/v1alpha1/overlay-wlan/{profile} API, and then delete the WLAN SSID profile. This are applicable only when the forward-mode parameter in a WLAN SSID profile is set to FORWARD_MODE_L2 or FORWARD_MODE_MIXED.

Modified APIs

Table 3: Modified APIs

API

Description

Monitoring > Access Points

New parameters are added to APIs listed under Monitoring > Access Points.

  • SiteName—Displays the name of the site where the device is located. This name is used to identify and manage devices based on their physical location, allowing for better organization and tracking.

  • ClusterName—Displays the name of the cluster to which the device belongs. If the device is not associated with any cluster, the cluster name will be null.

  • Three new parameters bandwidth, channel, and power are added under the Radios payload.

Monitoring > Firewall Session

The Firewall Session API now supports Switch sessions, along with AP and gateway sessions. Three new parameters are added to the switch telemetry:

  • tlsServerVersion—Displays the TLS server version for the session.

  • certficateExpiryDate —Displays the date of expiry of the certificate for the session.

  • destinationLocation—Displays the server location for the session.

For APs and gateways, tlsServerVersion and certficateExpiryDate parameters are set to Null. The destinationLocation parameter is available for APs, gateways, and switches.

Deprecated APIs

Table 4: Deprecated APIs

Deprecated API

Alternate API

Description

Scope Management

[GET] /network-config/v1alpha1/devices

[GET] /network-monitoring/v1alpha1/devices

 

The alternate API is listed in the MRT page under Monitoring > Devices.

This API is used to fetch a list of network devices that are onboarded and currently being monitored, such as access points, switches, and gateways, based on the query parameters provided.