topic Re: Configuring Cisco ISE in CLI in Network Access Control https://community.cisco.com/t5/network-access-control/configuring-cisco-ise-in-cli/m-p/3536899#M511742 <HTML><HEAD></HEAD><BODY><P>No, you might be able to do some of this via the api but likely not all of it</P></BODY></HTML> Thu, 08 Mar 2018 03:40:22 GMT Jason Kunst 2018-03-08T03:40:22Z Configuring Cisco ISE in CLI https://community.cisco.com/t5/network-access-control/configuring-cisco-ise-in-cli/m-p/3536897#M511736 <HTML><HEAD></HEAD><BODY><P style="font-size: 16px; font-family: CiscoSans, 'Helvetica Neue', Helvetica, Arial, sans-serif; color: #58585b;">I have a Cisco ISE 2.3 deployed as a standalone node for AAA. As a test only one network devide is configured with ISE to carryout the AAA processes.</P><P style="font-size: 16px; font-family: CiscoSans, 'Helvetica Neue', Helvetica, Arial, sans-serif; color: #58585b;"></P><P style="font-size: 16px; font-family: CiscoSans, 'Helvetica Neue', Helvetica, Arial, sans-serif; color: #58585b;">I would like to know, if possible, how to configure Cisco ISE using the CLI. Is it possible to completely bypass the Admin web GUI and carryout every task via the CLI. For example, adding new network device, creating authentication and authorization policies, etc. using CLI.</P><P style="font-size: 16px; font-family: CiscoSans, 'Helvetica Neue', Helvetica, Arial, sans-serif; color: #58585b;"></P><P style="font-size: 16px; font-family: CiscoSans, 'Helvetica Neue', Helvetica, Arial, sans-serif; color: #58585b;">Cisco ISE CLI reference guide does list some of the CLI options that ISE has, however, I could not find anything about adding network devices or policies.</P></BODY></HTML> Thu, 08 Mar 2018 03:14:41 GMT https://community.cisco.com/t5/network-access-control/configuring-cisco-ise-in-cli/m-p/3536897#M511736 deepakramanath 2018-03-08T03:14:41Z Re: Configuring Cisco ISE in CLI https://community.cisco.com/t5/network-access-control/configuring-cisco-ise-in-cli/m-p/3536898#M511737 <HTML><HEAD></HEAD><BODY><P>ISE admin CLI performs mainly the management functions for the networking, and those can't be achieve by ISE admin web UI. It does not have every functions that carried by ISE admin web UI.</P><P></P><P>ISE has some ERS API for CRUD. Please enable ERS under ISE admin web &gt; Administration &gt; System &gt; Settings &gt; ERS Settings and read the on-box SDK documentation.</P></BODY></HTML> Thu, 08 Mar 2018 03:38:22 GMT https://community.cisco.com/t5/network-access-control/configuring-cisco-ise-in-cli/m-p/3536898#M511737 hslai 2018-03-08T03:38:22Z Re: Configuring Cisco ISE in CLI https://community.cisco.com/t5/network-access-control/configuring-cisco-ise-in-cli/m-p/3536899#M511742 <HTML><HEAD></HEAD><BODY><P>No, you might be able to do some of this via the api but likely not all of it</P></BODY></HTML> Thu, 08 Mar 2018 03:40:22 GMT https://community.cisco.com/t5/network-access-control/configuring-cisco-ise-in-cli/m-p/3536899#M511742 Jason Kunst 2018-03-08T03:40:22Z Re: Configuring Cisco ISE in CLI https://community.cisco.com/t5/network-access-control/configuring-cisco-ise-in-cli/m-p/3536900#M511744 <HTML><HEAD></HEAD><BODY><P>No, you cannot configure ISE functionality via the CLI. This must be done via the web UI or via the API.</P><P></P><P>The CLI basically lets you configure the system including interfaces, DNS, routing, start/stop/check the application status and view logs.</P></BODY></HTML> Thu, 08 Mar 2018 23:15:11 GMT https://community.cisco.com/t5/network-access-control/configuring-cisco-ise-in-cli/m-p/3536900#M511744 dmh 2018-03-08T23:15:11Z Re: Configuring Cisco ISE in CLI https://community.cisco.com/t5/network-access-control/configuring-cisco-ise-in-cli/m-p/3536901#M511746 <HTML><HEAD></HEAD><BODY><P>Thank you for your responses.</P><P></P><P>I have managed to by-pass the GUI for a few things like add network device, join AD domain, etc using the ERS API. However, still seeing if TACACS+ profiles can defined using the API. I have posted a question in a separate thread about this latter thing.</P></BODY></HTML> Wed, 21 Mar 2018 02:30:10 GMT https://community.cisco.com/t5/network-access-control/configuring-cisco-ise-in-cli/m-p/3536901#M511746 deepakramanath 2018-03-21T02:30:10Z Re: Configuring Cisco ISE in CLI https://community.cisco.com/t5/network-access-control/configuring-cisco-ise-in-cli/m-p/3536902#M511747 <HTML><HEAD></HEAD><BODY><P>T+ profiles are coming in ISE 2.4. Please check it out when ISE 2.4 FCS.</P></BODY></HTML> Wed, 21 Mar 2018 14:14:23 GMT https://community.cisco.com/t5/network-access-control/configuring-cisco-ise-in-cli/m-p/3536902#M511747 hslai 2018-03-21T14:14:23Z