Enable pxGrid on ISE via CLI/ERS

[LeroyW]

Hi,

is there a way to enable pxGrid via CLI or the API (ERS) on ISE?

I'm looking through https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/cli_guide/b_ise_CLIReferenceGuide_27.html

and https://developer.cisco.com/docs/identity-services-engine/2.7/ but can't seem to find a way.

I know how to do it via GUI. I'm specifically asking if it can be done without the GUI.

Many thanks in advance

[Mike.Cifelli · Accepted solution]

AFAIK no.  I even just checked the admin guide for ISE3.0 too and the process remains the same.  You have to use the admin UI to enable the persona on the respective node you wish to utilize.

Note if you browse to this you can view pxgrid API capabilities present with the current SDK: https://<isenode>:9060/ers/sdk#_

HTH!

[Jason Kunst · Accepted solution]

i'd suggest reach out to your account team sales to see if it can be added. Can you explain the use case here? are you talking about enabling it on the PSN? why is this necessary?

[LeroyW]

The question came up in a POC environment. We've made some bad experiences with having pxgrid enabled in an ISE VM snapshot. Sometimes it wouldn't boot normally or would take hours to do so.

Anyway, I was just curious if I missed some documentation on the matter. I should be able to brute-force-automate it (with selenium for example), but I always look for an alternative or native API first