ISE cli access

[Jean Welz]

Hello Team,

I’m facing an issue with ISE. I can log in to the GUI using AD-integrated credentials without any problem. However, when I try to access the CLI with the same credentials, it shows “wrong password.” Both GUI and CLI credentials are identical.

Could you please advise?

Thank you

[Rob Ingram]

@Jean Welz have you configured ISE CLI to use AD authentication? Just because you've configured the GUI to use AD, doesn't mean you can login to the CLI using AD accounts unless you have configure it. Reference guide - https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/217351-ad-integration-for-cisco-ise-gui-and-cli.html#toc-hId-347273578

[julian.bendix]

Hey there!

With same creds, you mean that you are also trying the password of the AD user for CLI?

That won't work, you gotta have a local ISE admin user there.

BR Jules