Cisco ISE Command Cheat Sheet

Santosh Shetty · ‎11-13-2025

Useful Cisco ISE command

1: Creating user

ISEPAN/admin(config)# username <Username> password plain <Password> role admin | user

e.g. username admin password plain ISE@dmin role admin

2: Reset GUI Password:

ISEPAN/admin# application [ reset-passwd {application-name} {administrator-ID} ]

e.g. application reset-passwd ise admin

3: Verify ise service status, to stop & start ISE services.

ISEPAN# application status ise

ISEPAN/admin# application start ise

ISEPAN/admin# application stop ise

4: Creating Repository:

If repository is created using GUI then we have to add host key via cli.

ISEPAN/admin# crypto host_key add host {FTP_Server_Name}

Creating repository via cli (this is temporary)

ISEPAN/admin#
ISEPAN/admin# config t
ISEPAN/admin(config)# repository {Repository_Name}
ISEPAN/admin(config-Repository)# url ftp://{FTP_Server_Name}/ISE
ISEPAN/admin(config-Repository)# user {FTP_Username} password plain {FTP_Password}
ISEPAN/admin#(config-Repository)#

To View Repository:

ISEPAN/admin# show repository {Repository_Name}

5 ISE patch installation:

If installing directly from repository.

ISEPAN/admin# application install {ise-apply-patch-file-name} {Repository_Name}

Verify if patch is installed.
For Hotpatch installation: show logging ade.log | inc {ise-apply-patch-file-name}

For regular patch: show version

6 Troubleshooting connectivity:

ping {Hostname / IP}

nslookup {Hostname / IP} name-server {DNS-Server}

7 Reset ISE:

ISEPAN/admin# application reset-config ise

Ensure: configuration and certificate backup is taken before reset.

Marcelo Morais · ‎11-15-2025

@Santosh Shetty ,

starting with Cisco ISE 3.2, the CLI command in Exec Mode: which (to display the contents of the commands available in the CLI) has been discontinued !

Note: please take a look at: ISE - write e which descontinuados.

The output of the which command was:

ise/admin# which
[ 1]. application configure<STRING>
[ 2]. application install<STRING><STRING>
[ 3]. application remove<STRING>
[ 4]. application reset-config<STRING>
[ 5]. application reset-passwd<STRING><STRING>
[ 6]. application start<STRING>
[ 7]. application start<STRING> safe
[ 8]. application stop<STRING>
[ 9]. application upgrade cleanup
[ 10]. application upgrade prepare<STRING><STRING>
[ 11]. application upgrade proceed
[ 12]. application upgrade <STRING><STRING>
[ 13]. backup<STRING> repository<STRING> ise-config encryption-key hash<STRING>
[ 14]. backup<STRING> repository<STRING> ise-config encryption-key plain<STRING>
[ 15]. backup<STRING> repository<STRING> ise-operational encryption-key hash<STRING>
[ 16]. backup<STRING> repository<STRING> ise-operational encryption-key plain<STRING>
[ 17]. backup-logs<STRING> repository<STRING> encryption-key hash<STRING>
[ 18]. backup-logs<STRING> repository<STRING> encryption-key plain<STRING>
[ 19]. backup-logs<STRING> repository<STRING> public-key
[ 20]. banner install post-login <STRING>[o] repository<STRING>
[ 21]. banner install pre-login <STRING>[o] repository<STRING>
[ 22]. banner remove post-login
[ 23]. banner remove pre-login
[ 24]. clock set <STRING> <INTEGER> <STRING> <INTEGER>
[ 25]. configure[o] terminal
[ 26]. copy <STRING> running-config
[ 27]. copy <STRING> startup-config
[ 28]. copy <STRING> <STRING>
[ 29]. copy logs <STRING>
[ 30]. copy running-config startup-config
[ 31]. copy running-config <STRING>
[ 32]. copy startup-config running-config
[ 33]. copy startup-config <STRING>
[ 34]. crypto host_key add host<STRING>
[ 35]. crypto host_key delete host<STRING>
[ 36]. crypto key delete authorized_keys
[ 37]. crypto key delete rsa
[ 38]. crypto key delete <STRING>
[ 39]. crypto key export<STRING> repository<STRING>
[ 40]. crypto key generate rsa passphrase<STRING>
[ 41]. crypto key import<STRING> repository<STRING>
[ 42]. crypto ntp_import_autokey<STRING> repository<STRING>
[ 43]. debug all
[ 44]. debug application all
[ 45]. debug application all <INTEGER>[o]
[ 46]. debug application install
[ 47]. debug application install <INTEGER>[o]
[ 48]. debug application operation
[ 49]. debug application operation <INTEGER>[o]
[ 50]. debug application uninstall
[ 51]. debug application uninstall <INTEGER>[o]
[ 52]. debug backup-restore all
[ 53]. debug backup-restore all <INTEGER>[o]
[ 54]. debug backup-restore backup
[ 55]. debug backup-restore backup <INTEGER>[o]
[ 56]. debug backup-restore backup-logs
[ 57]. debug backup-restore backup-logs <INTEGER>[o]
[ 58]. debug backup-restore history
[ 59]. debug backup-restore history <INTEGER>[o]
[ 60]. debug backup-restore restore
[ 61]. debug backup-restore restore <INTEGER>[o]
[ 62]. debug cdp all
[ 63]. debug cdp all <INTEGER>[o]
[ 64]. debug cdp config
[ 65]. debug cdp config <INTEGER>[o]
[ 66]. debug cdp infra
[ 67]. debug cdp infra <INTEGER>[o]
[ 68]. debug config all
[ 69]. debug config all <INTEGER>[o]
[ 70]. debug config backup
[ 71]. debug config backup <INTEGER>[o]
[ 72]. debug config clock
[ 73]. debug config clock <INTEGER>[o]
[ 74]. debug config infra
[ 75]. debug config infra <INTEGER>[o]
[ 76]. debug config kron
[ 77]. debug config kron <INTEGER>[o]
[ 78]. debug config network
[ 79]. debug config network <INTEGER>[o]
[ 80]. debug config repository
[ 81]. debug config repository <INTEGER>[o]
[ 82]. debug config service
[ 83]. debug config service <INTEGER>[o]
[ 84]. debug copy
[ 85]. debug copy <INTEGER>[o]
[ 86]. debug icmp all
[ 87]. debug icmp all <INTEGER>[o]
[ 88]. debug locks all
[ 89]. debug locks all <INTEGER>[o]
[ 90]. debug locks file
[ 91]. debug locks file <INTEGER>[o]
[ 92]. debug logging all
[ 93]. debug logging all <INTEGER>[o]
[ 94]. debug snmp all
[ 95]. debug snmp all <INTEGER>[o]
[ 96]. debug system all
[ 97]. debug system all <INTEGER>[o]
[ 98]. debug system id
[ 99]. debug system id <INTEGER>[o]
[ 100]. debug system info
[ 101]. debug system info <INTEGER>[o]
[ 102]. debug system init
[ 103]. debug system init <INTEGER>[o]
[ 104]. debug transfer
[ 105]. debug transfer <INTEGER>[o]
[ 106]. debug user all
[ 107]. debug user all <INTEGER>[o]
[ 108]. debug user password-policy
[ 109]. debug user password-policy <INTEGER>[o]
[ 110]. debug utils all
[ 111]. debug utils all <INTEGER>[o]
[ 112]. delete<STRING>
[ 113]. dir
[ 114]. dir recursive[o]
[ 115]. dir <STRING>
[ 116]. dir <STRING> recursive[o]
[ 117]. esr
[ 118]. forceout<STRING>
[ 119]. halt
[ 120]. license esr classic import<STRING> repository<STRING>
[ 121]. license esr smart GigabitEthernet<INTEGER>
[ 122]. mkdir<STRING>
[ 123]. nslookup<STRING>
[ 124]. nslookup<STRING> querytype[o]<STRING>[o]
[ 125]. nslookup<STRING> querytype[o]<STRING>[o] name-server[o]<STRING>[o]
[ 126]. password
[ 127]. patch install<STRING><STRING>
[ 128]. patch remove<STRING><STRING>
[ 129]. ping<STRING>
[ 130]. ping<STRING> df[o]<INTEGER>[o]
[ 131]. ping<STRING> df[o]<INTEGER>[o] packetsize[o]<INTEGER>[o]
[ 132]. ping<STRING> df[o]<INTEGER>[o] packetsize[o]<INTEGER>[o] pingcount[o]<INTEGER>[o]
[ 133]. ping<STRING> df[o]<INTEGER>[o] pingcount[o]<INTEGER>[o]
[ 134]. ping<STRING> df[o]<INTEGER>[o] pingcount[o]<INTEGER>[o] packetsize[o]<INTEGER>[o]
[ 135]. ping<STRING> packetsize[o]<INTEGER>[o]
[ 136]. ping<STRING> packetsize[o]<INTEGER>[o] pingcount[o]<INTEGER>[o]
[ 137]. ping<STRING> pingcount[o]<INTEGER>[o]
[ 138]. ping<STRING> pingcount[o]<INTEGER>[o] packetsize[o]<INTEGER>[o]
[ 139]. ping6<STRING>
[ 140]. ping6<STRING> GigabitEthernet[o]<INTEGER>[o]
[ 141]. ping6<STRING> GigabitEthernet[o]<INTEGER>[o] packetsize[o]<INTEGER>[o]
[ 142]. ping6<STRING> GigabitEthernet[o]<INTEGER>[o] packetsize[o]<INTEGER>[o] pingcount[o]<INTEGER>[o]
[ 143]. ping6<STRING> GigabitEthernet[o]<INTEGER>[o] pingcount[o]<INTEGER>[o]
[ 144]. ping6<STRING> GigabitEthernet[o]<INTEGER>[o] pingcount[o]<INTEGER>[o] packetsize[o]<INTEGER>[o]
[ 145]. ping6<STRING> packetsize[o]<INTEGER>[o]
[ 146]. ping6<STRING> packetsize[o]<INTEGER>[o] pingcount[o]<INTEGER>[o]
[ 147]. ping6<STRING> pingcount[o]<INTEGER>[o]
[ 148]. ping6<STRING> pingcount[o]<INTEGER>[o] packetsize[o]<INTEGER>[o]
[ 149]. reload
[ 150]. reset-config
[ 151]. restore<STRING> repository<STRING>
[ 152]. restore<STRING> repository<STRING> encryption-key hash<STRING>
[ 153]. restore<STRING> repository<STRING> encryption-key hash<STRING> include-adeos
[ 154]. restore<STRING> repository<STRING> encryption-key plain<STRING>
[ 155]. restore<STRING> repository<STRING> encryption-key plain<STRING> include-adeos
[ 156]. rmdir<STRING>
[ 157]. show application
[ 158]. show application status[o]<STRING>[o]
[ 159]. show application version[o]<STRING>[o]
[ 160]. show backup history
[ 161]. show backup status
[ 162]. show banner post-login
[ 163]. show banner pre-login
[ 164]. show cdp all
[ 165]. show cdp neighbors
[ 166]. show clock
[ 167]. show container tc-nac adapters
[ 168]. show container tc-nac all
[ 169]. show container tc-nac inspect container-id<STRING>
[ 170]. show container tc-nac inspect container-name<STRING>
[ 171]. show container tc-nac stats container-id<STRING>
[ 172]. show container tc-nac stats container-name<STRING>
[ 173]. show container wifi setup all
[ 174]. show cpu
[ 175]. show cpu statistics
[ 176]. show cpu usage
[ 177]. show crypto authorized_keys
[ 178]. show crypto host_keys
[ 179]. show crypto key
[ 180]. show disks
[ 181]. show icmp_status
[ 182]. show interface
[ 183]. show interface GigabitEthernet<INTEGER>
[ 184]. show inventory
[ 185]. show ip route
[ 186]. show ipv6 route
[ 187]. show logging
[ 188]. show logging application
[ 189]. show logging application <STRING>
[ 190]. show logging application <STRING> tail
[ 191]. show logging application <STRING> tail count<INTEGER>
[ 192]. show logging container tc-nac container-id<STRING>
[ 193]. show logging container tc-nac container-id<STRING> log-name<STRING>
[ 194]. show logging container tc-nac container-id<STRING> log-name<STRING> tail
[ 195]. show logging container tc-nac container-name<STRING>
[ 196]. show logging container tc-nac container-name<STRING> log-name<STRING>
[ 197]. show logging container tc-nac container-name<STRING> log-name<STRING> tail
[ 198]. show logging internal
[ 199]. show logging system
[ 200]. show logging system <STRING>[o]
[ 201]. show logging system <STRING>[o] tail
[ 202]. show logging system <STRING>[o] tail count<INTEGER>
[ 203]. show logins cli
[ 204]. show logins cli count<INTEGER>
[ 205]. show memory
[ 206]. show ntp
[ 207]. show ports
[ 208]. show process
[ 209]. show repository<STRING>
[ 210]. show restore history
[ 211]. show restore status
[ 212]. show running-config
[ 213]. show snmp-server engineID
[ 214]. show snmp-server user
[ 215]. show startup-config
[ 216]. show tech-support
[ 217]. show tech-support file[o]<STRING>[o]
[ 218]. show terminal
[ 219]. show timezone
[ 220]. show timezones
[ 221]. show udi
[ 222]. show uptime
[ 223]. show users
[ 224]. show users status
[ 225]. show version
[ 226]. show version history
[ 227]. ssh delete[o] host<STRING>
[ 228]. ssh <STRING><STRING>
[ 229]. ssh <STRING><STRING> port[o]<INTEGER>[o]
[ 230]. ssh <STRING><STRING> port[o]<INTEGER>[o] version[o]<INTEGER>[o]
[ 231]. ssh <STRING><STRING> version[o]<INTEGER>[o]
[ 232]. tech dumptcp<INTEGER>
[ 233]. tech dumptcp<INTEGER> count<INTEGER>
[ 234]. tech iostat
[ 235]. tech iotop
[ 236]. tech mpstat
[ 237]. tech netstat
[ 238]. tech top
[ 239]. tech vmstat
[ 240]. terminal length<INTEGER>
[ 241]. terminal session-timeout<INTEGER>
[ 242]. terminal session-welcome<STRING>
[ 243]. terminal terminal-type<STRING>
[ 244]. traceroute<STRING>
[ 245]. undebug all
[ 246]. undebug application all
[ 247]. undebug application install
[ 248]. undebug application operation
[ 249]. undebug application uninstall
[ 250]. undebug backup-restore all
[ 251]. undebug backup-restore backup
[ 252]. undebug backup-restore backup-logs
[ 253]. undebug backup-restore history
[ 254]. undebug backup-restore restore
[ 255]. undebug cdp all
[ 256]. undebug cdp config
[ 257]. undebug cdp infra
[ 258]. undebug config all
[ 259]. undebug config backup
[ 260]. undebug config clock
[ 261]. undebug config infra
[ 262]. undebug config kron
[ 263]. undebug config network
[ 264]. undebug config repository
[ 265]. undebug config service
[ 266]. undebug copy
[ 267]. undebug icmp all
[ 268]. undebug locks all
[ 269]. undebug locks file
[ 270]. undebug logging all
[ 271]. undebug snmp all
[ 272]. undebug system all
[ 273]. undebug system id
[ 274]. undebug system info
[ 275]. undebug system init
[ 276]. undebug transfer
[ 277]. undebug user all
[ 278]. undebug user password-policy
[ 279]. undebug utils all
[ 280]. write erase
[ 281]. write memory
[ 282]. write terminal

I hope this helps you add commands to your cheat sheet !