ISE-VM-K9, wifi control policy

[00u19mvna1OsJFjOi5d7]

According to my office setup wifi network for all staffs and we config as below

AP-> AC(5500 series 5508) -> ISE(ise-VM-K9)

so nowaday we can create user and password for connecting to internet.

my question is :

- How can we make the limit data using for some user like this group can use only 1GB and limit speed at 5MB?.

- If we have new user, admin no need to add it on web portal, user can scan a QR code on the office to register and access the network.

- Can I access ISE to insert update delete some user from external side? like API....

[Mike.Cifelli · Accepted solution]

- How can we make the limit data using for some user like this group can use only 1GB and limit speed at 5MB?.

Take a look at the following: ISE Network Access Attributes - Cisco Community

Here you can find the different types of radius attributes that you can use in authz.  Try testing some airespace ones.

- If we have new user, admin no need to add it on web portal, user can scan a QR code on the office to register and access the network.

Take a peek at this: ISE Guest Access Prescriptive Deployment Guide - Cisco Community

- Can I access ISE to insert update delete some user from external side? like API....

You can use ISE APIs to manage internal users.  I suggest taking a peek at the online SDK:  https://<your pan ip>:9060/ers/sdk#

HTH!

[00u19mvna1OsJFjOi5d7]

It's very good news that Cisco they have API for developer.

- How could I make sure that the ISE can support API?

- How could I learn more about this API description?

[Mike.Cifelli · Accepted solution]

Use the following for guides/examples:

ISE ERS API Examples - Cisco Community

Introduction to External RESTful Services API (cisco.com)

HTH!