Cisco ISE TMEs Thomas Howard and Charllie Moreton encourage you to put ISE in your lab and use Ansible to automate the ISE lifecycle to easily extend your free evaluation!
00:00 Intro & Agenda
00:57 Everyone needs an ISE Lab!
01:45 ISE Platforms
03:06 ISE Licenses for Cisco Sellers
03:39 ISE Evaluation Licenses cs.co/ise-lice...
06:33 ISE Lifecycle Orchestration via APIs and Zero Touch Provisioning
cs.co/ise-ztp
07:55 ISE APIs cs.co/ise-api and Versioning support
08:40 Previous ISE Deployment and Provisioning Webinars
cs.co/ise-youtube
09:57 Software for Automation:
- Python: www.python.org...
- Ansible: www.ansible.com/
- VSCode: visualstudio.m... or vscodium.com/
10:32 ISE Lab Deployment & Lifecycle with Extended Evaluation
11:56 JSON and YAML
12:33 How Ansible Works
15:11 ISE Eternal Evaluation (ISEEE) Playbooks
- github.com/1ho...
- github.com/ISE... : Charlie's repositories for multi-cloud, VPN, and load balancing
17:18 Demo: ISE_Ansible_Sandbox Installation and Setup
21:55 Demo: Provision and Patch ISE 3.2 in AWS
23:38 - SSH into ISE and run `show application status ise`
25:25 - Get ISE Facts and Apply Patch 2
27:00 Demo: Review ISEEE Ansible Playbook with tags and vars file
31:22 Demo: ISEEE Licensing Playbook
32:00 Demo: Login to ISE and Reset Password (ISE 3.2 and later)
34:10 Demo: Change ISE Admin Password Policy!
36:06 Demo: Reset ISE Admin Password Playbook
37:41 Demo: ISEEE Deploy Playbook
38:42 - ISE Certificate Automation gotcha
40:02 Demo: ISEEE Certificates Playbook
40:29 Demo: ISEEE Configure Playbook and associated roles
45:16 Demo: ISEEE Backup Playbook
47:44 Demo: ISEEE Patch ISE 3.2 Patch 2 ⮕ Patch 3
50:08 Demo: ISEEE Facts Playbook
50:40 Demo: ISEEE Extend Playbook
Use Backup & Restore for ISE 3.2 P3 ⮕ ISE 3.3 Upgrade via API
ⓘ The backup & restore failed because you will see @ 55:22 the ISE node failed to respond with a Connection Refused message. You can see @ 57:23 that the ISE API Gateway Service is Not Running even though the other services were. Without the API Gateway, SSH and HTTPS does not work. This is clearly a bug and needs to be fixed.
56:19 Demo: ISEEE Destroy Playbook
57:24 Troubleshooting ISEEE Restore in AWS Console
58:11 Resources, ZTP and Cloud Provisioning
ISE Licensing & Evaluations
cs.co/ise-lice...
Cisco Partner Security Community
community.cisc...
Cisco Security POV and Lab Licensing and Software Access:
community.cisc...
59:20 Questions
27 авг 2024
