cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

How-to Integrate Infoblox and Cisco Identity Services Engine (ISE) using Cisco Platform Exchange Grid (pxGrid)

6698
Views
12
Helpful
2
Comments

NOTE: This document is old as it utilizes older version of ISE and pxGrid that are either EOS or being removed from the product. As of ISE 2.4 we develop pxGrid 2.0. In ISE 3.1 pxGrid 1.0 is removed, please work with vendor for latest documentation. We will use this as older reference but maybe removed in the future.

 

This document is for Cisco engineers and customers who are planning to integrate Infoblox NIOS and Cisco Identity Service Engine (ISE) 2.1 using Cisco Platform Exchange Grid (pxGrid). Infoblox NIOS version 7.3.6 software was used for both the virtual Grid Master and Network Discovery (ND) member.

This document includes:

  • Configuring Infoblox and the ISE pxGrid node for both Self-signed and CA-signed certificates
  • Configuring the Infoblox Grid Master (GM) and Infoblox Network Discovery (ND) member
  • Configuring DHCP and DNS services on the Infoblox GM
  • Configuring Infoblox ISE Ecosystem parameters and connecting to the ISE pxGrid node
  • Creating Infoblox DHCP and IPAM notifications for publishing Dynamic Topic information
  • Creating Infoblox RPZ notifications to send blocked DNS responses to the ISE pxGrid
  • Creating ISE EPS Quarantine Authorization policy
  • Populating Infoblox IPAM table with pxGrid session information
  • Quarantining an endpoint due to an Infoblox RPZ violation

The reader will observe and become familiar with the ISE user session information that will populate the IPAM table for more contextual information around IP events. Additionally, a RPZ (Response Policy Zone) will be created for blocking www.yahoo.com , with the results the of the endpoint being quarantined.

ISE was configured in a Stand-alone environment for testing. For configuring ISE in a distributed environment, please see https://communities.cisco.com/docs/DOC-68284

Comments
jason-lew
Beginner

Hi, the link to the pdf document is reporting as "requested resource is not available".

jeppich
Cisco Employee

Hey Jason,

 

Yup, it looks some there is an issue with the link.

 

Please send me an email directly, and i will send you the doc.  

 

Thanks,

John

jeppich@cisco.com

Create
Recognize Your Peers
Content for Community-Ad