topic Re: PostgreSQL External Identity store in Network Access Control

PostgreSQL External Identity store

Richard Lucht — Fri, 23 Feb 2018 21:07:53 GMT

I followed this guide PostgreSQL -Configure ODBC on ISE 2.1 with PostgreSQL - Cisco

I have this set up on Ubuntu and I have pgAdmin4 up and running connected the database as well. What I would like to do is set up groups or tables for mac addresses for devices like printers and other devices so we can store MAC addresses. has anyone else have this setup or something similar. this is only for testing purposes what we have planned is eventually have a database that desktop support can add mac address of devices like printers and other devices through a webpage. We want to keep them out of ISE and not keep sending these requests to be added to the ISE team.

If someone has a more efficient option I would like to hear about it.

Thanks

Re: PostgreSQL External Identity store

hslai — Sat, 24 Feb 2018 16:55:54 GMT

If your devices are relatively small in number (e.g. a couple of hundred items), then it would be good to use one simple table. If fairly sizable, then you should consider consulting with a DB expert for design and database normalization.

Re: PostgreSQL External Identity store

Craig Hyps — Mon, 26 Feb 2018 13:55:10 GMT

You could also leverage ERS API to programmatically add them to ISE by desktop support team without requesting ISE admin to manually add them via ISE Admin UI.

Re: PostgreSQL External Identity store

Richard Lucht — Mon, 26 Feb 2018 17:17:11 GMT

I started to look into this, can I use this to set up a web portal for desktop support to add MAC addresses to certain groups that I create in ISE?

Re: PostgreSQL External Identity store

Jason Kunst — Mon, 26 Feb 2018 17:22:23 GMT

Yes you can use the API to perform CRUD Operations on endpoints and groups of endpoints

https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/admin_guide/b_ise_admin_guide_23/b_ise_admin_guide_23_chapter_0100.html#task_59D6282675A843C7AAAA7DF988F63DE8

Re: PostgreSQL External Identity store

Richard Lucht — Mon, 26 Feb 2018 17:33:32 GMT

Hi Jason, is there a step by step guide for this? This is a completely new area for me. I would like to make it as simple as possible for the other users to add MAC address.

Re: PostgreSQL External Identity store

Jason Kunst — Mon, 26 Feb 2018 17:40:59 GMT

No there is not

Hopefully if someone has some notes they would share but no one has written one that I know of on the community

Re: PostgreSQL External Identity store

Richard Lucht — Mon, 26 Feb 2018 17:42:32 GMT

Thanks Jason