cancel
Showing results for 
Search instead for 
Did you mean: 

XIQ AP Import Workflow Error - Unable to Pull Device List

XIQ AP Import Workflow Error - Unable to Pull Device List

cameront2445
New Contributor II

We are trying to bring in Universal APs that are managed in XIQ. We use XIQ-SE for NAC for BYOD access. 

This is something that one of our Extreme SE provided partners set up for our organization, who no longer works at Extreme. GTAC Support told me to post the question here, so here I am.

We have used this workflow flawlessly without error for the past 2 years up until now. Nothing has changed in either of our environments (XIQ or XIQ-SE). 
Any insight as to what could be causing the error? See the attached image.

Thanks in advance for any replies.

1 ACCEPTED SOLUTION

cameront2445
New Contributor II

The root cause of the error we were receiving was because of the existing XIQ user account that was being used in the XIQ AP Import workflow within XIQ-SE suddenly stopped working. 
The Extreme SE did state that XIQ recently released a "scopes" feature which could have possibly caused the user account to be exposed to incorrect set parameters within XIQ. In XIQ when we attempted to set/update the existing XIQ user account used to pull XIQ APs in to XIQ-SE as the scope for all locations, the page would error out. 

Our solution was to simply create a new XIQ User account, update the XIQ AP Import workflow with the new user account, and the workflow began completing as expected.

Since we were using an XIQ user account to pull APs in to our XIQ-SE environment, API tokens were not a factor in play.

View solution in original post

7 REPLIES 7

Where are these workflow files "typically" stored at on XIQ-SE if we are dropping the file into the server via WinSCP? 

Since an Extreme SE built this for our organization, we have no knowledge of these types of processes. And Extreme's KB don't appear to provide much guidance on best practices.

Go to Tasks>Workflows to see the workflows that have been imported. Best you download and import the latest one Zdenek pointed you at and go from there. There was an older workflow which needed the bearer token adding to the script which might be what you are using and that token could have expired. Best you use the latest and reach out to your local SE or update everyone here as someone may be using the latest one and can advise on how to use the workflow if anything needs adding to XIQ Global Settings API Management?

Edit: The latest workflow uses a different method to check XIQ which is to provide the XIQ username and password. In your world site hierarchy you can have a site for APs and set the site action 'Add Device to Access Control Engine Group' I believe.

Found in XIQ-SE where to import the scripts from GUI. Since we have not had to import scripts into XIQ-SE, the gear button in the bottom left corner of the workflows menu was not obvious. Additionally, the focus has to be set to a group top level menu and not on a specific existing workflow (otherwise if an existing workflow is selected, the import button is greyed out). 

But I imported the new script, mirrored all of the same variables and accounts to used (verified account being used is passes login to XIQ), workflow is still failing with the same error. 

I do need to verify the API token status. 

I have reached out to our new Extreme SE and they are going to start investigating.

GTM-P2G8KFN