- 22
- 99 480
ISE Demo Lab
Приєднався 10 гру 2015
Cisco ISE Simplifies API updates using the 'PATCH' method
Cisco has updated the ERS API for ISE beginning in 3.2 to add the PATCH command as an ERS Request. This video will show how to use this new request and some of the nuances to expect.
I'm using cURL and my Windows Subsystem for Linux (WSL) to issue all of my API requests. You can use Postman or any other API tool that you prefer.
0:00 Intro
0:10 CRUD
0:32 How PATCH updates through ERS
1:11 Enabling API services in ISE
1:43 Install cURL in yout terminal
2:02 Create a network device using the POST request
3:27 List all network devices using the GET request to get the specific ID for the target device
3:40 Copying the ID for the target device
3:58 Retrieve all of the network device attributes using the GET request
4:18 Update the device name and password using the PUT request
5:34 Update the device name, description, and password using the PATCH request
7:01 Delete the network device using the DELETE request
7:50 Create an new Hotspot Guest Portal using the POST request
8:54 List all Hotspot Portals using the GET request to get the specific ID for the target portal
9:09 Copying the ID for the target portal
9:36 Retrieve all of the Hotspot Portal attributes using the GET request
10:03 Finding the settings for the Access Code
10:15 Enable and set the portal Access Code using the PATCH request
11:32 Update the portal Access Code using the PATCH request
12:28 Delete the Hotspot Portal using the DELETE request
13:15 Summary
Cisco ISE 3.2 Release Notes:
www.cisco.com/c/en/us/td/docs/security/ise/3-2/release_notes/b_ise_32_RN.html#concept_kkk_zhx_qsb
The Cisco ISE API Reference Guide can be found at cs.co/ise-api
I'm using cURL and my Windows Subsystem for Linux (WSL) to issue all of my API requests. You can use Postman or any other API tool that you prefer.
0:00 Intro
0:10 CRUD
0:32 How PATCH updates through ERS
1:11 Enabling API services in ISE
1:43 Install cURL in yout terminal
2:02 Create a network device using the POST request
3:27 List all network devices using the GET request to get the specific ID for the target device
3:40 Copying the ID for the target device
3:58 Retrieve all of the network device attributes using the GET request
4:18 Update the device name and password using the PUT request
5:34 Update the device name, description, and password using the PATCH request
7:01 Delete the network device using the DELETE request
7:50 Create an new Hotspot Guest Portal using the POST request
8:54 List all Hotspot Portals using the GET request to get the specific ID for the target portal
9:09 Copying the ID for the target portal
9:36 Retrieve all of the Hotspot Portal attributes using the GET request
10:03 Finding the settings for the Access Code
10:15 Enable and set the portal Access Code using the PATCH request
11:32 Update the portal Access Code using the PATCH request
12:28 Delete the Hotspot Portal using the DELETE request
13:15 Summary
Cisco ISE 3.2 Release Notes:
www.cisco.com/c/en/us/td/docs/security/ise/3-2/release_notes/b_ise_32_RN.html#concept_kkk_zhx_qsb
The Cisco ISE API Reference Guide can be found at cs.co/ise-api
Переглядів: 123
Відео
Configuring ISE for Public Key Authentication
Переглядів 4492 роки тому
Users are now able to be authenticated using Public Key Authentication. When authentication using public key is enabled, password-based user authentication is disabled. The public key authentication mechanism can be disabled at any time. Do not execute the command 'service sshd PubkeyAuthentication' if you do not have a public key to import into ISE. This disables password-based authentication ...
Using VMware Hot vMotion to Move ISE 3.1 Between Hosts
Переглядів 9922 роки тому
Hot vMotion support was added in ISE 3.1, what is hot vMotion? The ability to move virtual machines between hosts (or resource pools) in VMware vCenter Server. I'm using vCenter Server 6.7 Update 3j (6.7.0.51000) and ISE 3.1 Patch 1 Log4j Fix ISE Installation Guides cs.co/ise-install-guides ISE 3.1 Administration Guide cs.co/ise-31-admin ISE 3.1 Release Notes cs.co/ise-31-rn
Using Cisco Smart Software Manager (CSSM) On-Prem for Smart Licensing in Air-Gapped Networks
Переглядів 8 тис.2 роки тому
In this video I'll configure the Cisco Smart Software Manager On-Prem device to host our licenses for ISE. Then I will point ISE to this On-Prem device for all its licenses for this deployment. This option is made available in version 2.7 Patch 4, 3.0 Patch 2, and 3.1. We will go through the registration of the CSSM to the Cisco Online Smart Software Manager and the synchronization of licenses ...
Creating (and Removing) a Specific License Reservation (SLR) in ISE
Переглядів 3,2 тис.2 роки тому
This is another new feature that was introduced in ISE 3.1. The ability to reserve licenses for a specific ISE Deployment through the use of the Cisco Smart Software Management (CSSM) interface is a game-changer for global deployments. Don't worry, though, you can reverse the reservation and release the reserved licenses back into your Smart Account just as easily as you can reserve them! I sho...
Upgrade ISE-PIC to ISE Full Version
Переглядів 1,3 тис.2 роки тому
This video walks you through the process of upgrading your ISE-PIC instance to a Full Version of ISE. To be able to do this you need: ISE-PIC License SKU: R-ISE-VM-K9= ISE-PIC Upgrade License: L-ISE-PIC-UPG= As well as Essentials licenses in your Smart Account Read more on ISE-PIC here: ISE-PIC FAQ cs.co/ise-pic-faq Cisco Identity Services Engine Passive Identity Connector Administrator Guide, ...
Installing ISE on Nutanix Community Edition (CE) using ZTP
Переглядів 8102 роки тому
Nutanix was the most commonly requested hypervisor fir ISE Support. Now that the support is here, let's install it and see what needs to be done to get ISE to work correctly. Download Nutanix CE here (must register to download): next.nutanix.com/ Commands needed on CVM (each ISE VM needs these) to get ISE to install: acli vm.update "VM_Name" extra_flags=”enable_hyperv_clock=False” acli vm.updat...
Installing ISE on Ubuntu Linux KVM using ZTP
Переглядів 8482 роки тому
This video will show how to install Cisco Identity Services Engine on Linux KVM using the Ubuntu Linux distribution. Download Ubuntu here: ubuntu.com/download/desktop Virtual Machine Manager can be downloaded here: virt-manager.org/ XML Settings: Replace the [ and ] with the appropriate angle brackets Place this block after the vcpu information: [sysinfo type="smbios"] [system] [entry name="pro...
Installing ISE on Microsoft Hyper-V with ZTP
Переглядів 1,7 тис.2 роки тому
For the third ISE Installation video in the ZTP series, we're going to take a look at Microsoft Hyper-V and see the errors that will be encountered if we try to use default ZTP settings. For more detailed information about the ISE Zero Touch Provisioning process, visit: ISE Zero Touch Provisioning (ZTP) cs.co/ise-ztp Other helpful links are: Cisco ISE Installation Guides cs.co/ise-install-guide...
Using 4 Different Methods to Install ISE on VMware vCenter using ZTP
Переглядів 1,7 тис.2 роки тому
This video will show how to install Cisco Identity Services Engine on VMware vCenter Server using ZTP through FOUR different methods. 1. Installation using an .iso file on your local computer - ZTP with an .iso file 2. Installation using an .iso file in the VMware datastore - ZTP with an .img file 3. Importing an .ova file through the Web GUI - ZTP with an .img file 4. Importing an .ova file us...
Install ISE on Cisco SNS through the CIMC using ZTP
Переглядів 1,3 тис.2 роки тому
Whew! That's a LOT of acronyms! In this video, I'll show you how to install Cisco Identity Services Engine on a Cisco SNS Server through the Cisco Integrated Management Controller using the Zero Touch Provisioning process. To configure your CIMC, watch this video ua-cam.com/video/8jMhvW1LWns/v-deo.html&t To create the ZTP configuration file, watch this video ua-cam.com/video/O4xz5cOqv90/v-deo.h...
Creating the ISE Zero Touch Provisioning (ZTP) Image File
Переглядів 1,1 тис.2 роки тому
ISE 3.1 introduces Zero Touch Provisioning (ZTP) as a more efficient means to complete the setup script which assigns the hostname, IP Address, DNS Server, NTP Server, etc. to your ISE Node. I detail the process of creating this file in this video. For in-depth configurations and the platforms supported for ZTP, check out the configuration guide I wrote and the other resources below. ISE Zero T...
Cisco ISE Licensing Changes from v3.0 to v3.1
Переглядів 3 тис.3 роки тому
Cisco Identity Services Engine Licensing Changes from version 3.0 to version 3.1 These licensing changes will also be implemented in ISE v3.0 Patch 4. The correct SKU for the VM Common License is R-ISE-VMC-K9= Resources Used: - Cisco ISE 3.1 Admin Guide cs.co/ise-31-admin - Cisco ISE 3.1 Release Notes cs.co/ise-31-rn - Cisco ISE Ordering Guide cs.co/ise-ordering-guide - Cisco ISE License Migrat...
Cisco ISE Licensing Changes from v2.x to v3.1
Переглядів 5 тис.3 роки тому
Cisco Identity Services Engine Licensing Changes from version 2.x to version 3.1 These licensing changes will also be implemented in ISE v3.0 Patch 4. The correct SKU for the VM Common License is R-ISE-VMC-K9= Resources Used: - Cisco ISE 3.1 Admin Guide cs.co/ise-31-admin - Cisco ISE 3.1 Release Notes cs.co/ise-31-rn - Cisco ISE Ordering Guide cs.co/ise-ordering-guide - Cisco ISE License Migrat...
ISE 3.0 Licensing Changes
Переглядів 1,1 тис.3 роки тому
ISE 3.0 has brought about changes in licensing in all facets. What are the changes and how does it impact you? Watch to find out! The resources I used to make this video are: - Cisco ISE Ordering Guide - cs.co/ise-ordering-guide - Cisco ISE License Migration Guide - cs.co/ise-migration-guide - Cisco ISE Licensing FAQ - cs.co/ise-license-faq - Cisco ISE 3.0 Admin Guide - cs.co/ise-30-admin - Cis...
Export to OVA on VMWare vSphere ESXi & vCenter Server 6.5 - 6.6 - 6.7
Переглядів 16 тис.4 роки тому
Export to OVA on VMWare vSphere ESXi & vCenter Server 6.5 - 6.6 - 6.7
Initial ISE Configuration including Offline Posture and Feed Service Updates
Переглядів 1 тис.6 років тому
Initial ISE Configuration including Offline Posture and Feed Service Updates
Installing ISE 2.4 on VMWare vCenter 6.5 from OVA Package using the OVF Tool
Переглядів 10 тис.6 років тому
Installing ISE 2.4 on VMWare vCenter 6.5 from OVA Package using the OVF Tool
Installing ISE 2.4 on VMWare vSphere ESXi 6.0 from ISO
Переглядів 1,9 тис.6 років тому
Installing ISE 2.4 on VMWare vSphere ESXi 6.0 from ISO
Upgrading ISE Using the Backup and Restore Method
Переглядів 10 тис.6 років тому
Upgrading ISE Using the Backup and Restore Method
Installing ISE 2.4 on VMWare vCenter 6.5 from ISO
Переглядів 7 тис.6 років тому
Installing ISE 2.4 on VMWare vCenter 6.5 from ISO
Configuring the CIMC and Installing Cisco ISE on an SNS Appliance
Переглядів 23 тис.6 років тому
Configuring the CIMC and Installing Cisco ISE on an SNS Appliance
Good video, but I have a question. When you upgrade PIC to a full blown ISE and join the new node into the existing ISE deployment, would the Passive ID configurations on the original ISE-PIC node be erased? My understanding is, if the ISE-PIC node is upgraded as a Primary PAN, then it retains its original configurations. If the PIC node is joining an existing ISE deployment, then its configuration would be erased. Would appreciate if you can throw some light on this. Thanks.
That is correct. Adding as a PSN will not retain configurations.
This is beyond helpful
Always a 3rd class approach by Cisco regarding Licenses, specially in Unified Communications filed...
Where in the procces the floppy drive is created? I followed the video, but could not find created floppy disk..
The process for using a floppy drive in Hyper-V doesn't work. That's what is shown in the video. Use a second .iso file for the ZTP process.
my question is i have 1 license for ISE VM. if i configure 2 nodes of ISE does that require another 1 more license for the secondary node?
Each virtual machine requires a license, so for a 2 node deployment, you would need 2 VM Licenses
Great info. Thank you very much.
VMware vSphere Client 6.0 Update 3 link does not work
VMware has retired that client
Awesome 👌
Thank you!
Thanks for sharing :) Very Informative👍
Thank you!
Do you happen to know what license is required for ISE to integrate with MS SCCM in 3.1? I assume Intune integration needs Premier, but not sure about SCCM.
If looking to integrate SCCM for Posture remediation capabilities, the Premier license is needed. (patch level, settings, etc.)
@@ISEDemoLab Thanks for confirming.
The DNA Premier Licenses have been announced as End of Life: www.cisco.com/c/en/us/products/collateral/wireless/dna-premier-eol.html
The DNA Premier Licenses have been announced as End of Life: www.cisco.com/c/en/us/products/collateral/wireless/dna-premier-eol.html
The DNA Premier Licenses have been announced as End of Life: www.cisco.com/c/en/us/products/collateral/wireless/dna-premier-eol.html
These licensing changes will also be implemented in ISE v3.0 Patch 4. The correct SKU for the VM Common License is R-ISE-VMC-K9=
These licensing changes will also be implemented in ISE v3.0 Patch 4. The correct SKU for the VM Common License is R-ISE-VMC-K9=
the url doesnt work
This is very informative. Thanks for sharing.
excellent and helpful video
hello, I am a little confused and I have a question, the SNS server has a vmware base installed, in other words an esxi and on that ISE is installed? or ISE works directly on the hardware of the equipment?
ISE is installed directly on the hardware of a Cisco SNS Server
My ISE installation takes more than 4 hours any idea how to speed it up?
Will try this! Thanks
For KVM Console to work be sure to open for TCP/2060 in case the CIMC management is connected to a DMZ behind a firewall. For older CIMC versions like v2.x remember to put the Microsoft webbrowser into compatibility mode.
hi! thanks for very useful video! But i have couple of quiestions if you don't mind) 1. What type of disk is needed? Thin or Thick prov zero...blablabla? 2. ISE2.6 what rhel version and vwmwaer compability?
Thick Provisioned is recommended. RHEL 7 and VMware Virtual Machine Hardware Version 8 or higher on ESXi 5.x (5.1 U2 minimum) and 6.x as per the Cisco Identity Services Engine Installation Guide, Release 2.6 found here: www.cisco.com/c/en/us/td/docs/security/ise/2-6/install_guide/b_ise_InstallationGuide_26/b_ise_InstallationGuide_26_chapter_01.html
What is the command for install directly to an ESXi client... meaning no VCenter?
Sorry this is SOOO late, but you should be able to use the command: ovftool -ds=[datastore] [local path to vm] vi://[username]:[password]@[vSphere ESXi server IP Address]/"
Thanks for the great video. I've followed your steps on installing ISE 2.4 but unfotunately I got error "Pane is dead" the first time.. So I am trying to install it again, but this time it throws bunch of info logger, debug messages. Is this normal and part of the building procedure?
It is not normal. Please ensure you have allocated the minimum hardware needed.