topic Re: Configuring Cisco ISE with CLI in Network Access Control

Configuring Cisco ISE with CLI

deepakramanath — Fri, 21 Feb 2020 18:47:55 GMT

I have a Cisco ISE deployed as a standalone node for AAA. As a test, only one network device is configured with ISE to carryout the AAA processes.

I would like to know, if possible, how to configure Cisco ISE using the CLI. Is there a way to completely bypass the Admin web GUI and carryout all tasks via the CLI. For example, adding new network device, creating authentication and authorization policies, etc., using CLI.

Cisco ISE CLI reference guide does list some of the CLI commands, however, I could not find anything about adding network devices or policies.

Re: Configuring Cisco ISE with CLI

Mark Elsen — Thu, 08 Mar 2018 04:56:51 GMT

- Not possible

Re: Configuring Cisco ISE with CLI

Mohammed al Baqari — Thu, 08 Mar 2018 06:07:50 GMT

Hi,

You can't bypass ISE GUI. Majority of the actual work can't be done from
CLI such as conditions, results, dictionaries, policies, profiling etc.

Re: Configuring Cisco ISE with CLI

deepakramanath — Tue, 20 Mar 2018 23:47:25 GMT

Thanks for the responses.

I have managed to use the ERS API to configure few things without the GUI, however, now having difficulties with defining TACACS profiles using ERS API. Anyone here having experience with this?

Thanks

Deepak