This post will find the details of an endpoint off the MAC address, and then see all the endpoints in a certain group.The API doesn’t seem to be able to search for an endpoint by IP address, as can be done in the GUI. Maybe it can, but with another API. The device that will […]
ISE Lab: API 4 – Search for Endpoint Read More »
This will be creating and deleting a dACL. Again, details can be found in the built-in ISE documentation. The Postman headers are the same as in the previous GET. Create The only changes here are; POST method and to add the dACL that will be sent with a name and description.A 201 response code will
ISE Lab: API 3 – Create & Delete dACLs Read More »
Now that the API has been configured, it can be tested. In this post, I will show a few base GET requests that can be made to ISE in Postman.There is a lot of documentation built into ISE to view which gives examples on the types of calls and examples of calls and returned output.https://172.17.5.101:9060/ers/sdk#_
ISE Lab: API 2 – First API GET Requests with Postman Read More »
ISE does not have the REST API enabled by default. It must be enabled in the ISE admin tab. When saved, there is information at the top showing the URL to an SDK info page that goes through the setup procedure.The most basic setup is only a single step to create an ERS admin. It
ISE Lab: API 1 – Setup Read More »
The posture configuration is very similar to the one that was created in the Anyconnect VPN post. This post will go over the posture steps and demonstrate what it looks like on a switch and also in the ISE RADIUS live logs. On a wired LAN connection using dot1x the ISE posture can determine based
ISE Lab: Wired 3 – 802.1x Posture Read More »
This is the first time I have managed to make this work in a GNS3 environment in several years of working with ISE I think it is down to the updated switch image. All the steps and config will be detailed from the switch to ISE. To see the configuration, go here – The device
ISE Lab: Wired 2 – 802.1x Configuration Read More »
The ISE posture scanning will work on wired, wireless and VPNs. There are multiple steps to getting the posture policy configured. This post will go through each step. Client Provisioning Policy This part has three main components – Upload AnyConnect VPN and ISE Compliance Module – Create Posture Profile – Create AnyConnect Configuration The files
ISE Lab: ASA AnyConnect 2 – ISE Posture Read More »
This lab is demonstrating the use of Cisco AnyConnect and ISE. AnyConnect can be used in conjunction with ISE in a similar way it can on a wired LAN.Based off a username, ISE can determine which group-policy to apply to an AnyConnect user, and apply a downloadable ACL (dACL) to that user. In addition to
ISE Lab: ASA AnyConnect 1 – VPN, RADIUS and Policy Sets Read More »
This is the configuration to get the switch access-switch1 to talk to ISE. This is the beginning stage of 802.1x. The switch will need to talk to ISE using RADIUS to ask if the user credentials are valid. ISE will ask the AD server and then a yes or no is sent back to the
ISE Lab: Wired 1 – RADIUS & Switch RADIUS Config Read More »
As this is a lab topology, it relies on lab licenses. For ISE this means that there is a 90 day period. The license I have has expired and requires fixing. This is quite simple to perform. All that needs to be done is a config backup taken from the old device and restored to
ISE Lab: Backup & Restore ISE Read More »