I'm trying to define a simple "TACACS Profiles" and/or "TACACS Command Sets" using the ERS API (not via the GUI) in a Cisco ISE deployment. Although the API posts the required information, I do not see any profiles being defined in the ISE GUI. Steps that I have taken are as follows:   1. Enabled the ERS Read/Write from Administration -> Settings -> ERS Settings 2. Created ERS Admin user from Administration -> Admin Access  -> Administrators -> Admin Users (click add and then created the ersadmin user with Admin Groups being ERS Admin) 3. Login to https://cisco-ise-host-IP:9060/ers/sdk#_ using the ersadmin credentials 4. Following the API documentation to create a authorisation profile, in particular, the TACACS profile as stated before. 5. From a Linux terminal, I am using curl to POST the TACACS Profile/Command Set configuration (saved in as JSON format)   Although, I have worked out various intermediate steps to do the above step 5 successfully, the added profile is not reflected in the GUI. The API documentation doesn't not specifically mention about TACACS authorisation profiles and hence I'm not sure if this is actually possible, that is, to add a TACACS profile via the API.   Any help would be highly appreciated ... View more

I have a Cisco ISE deployed as a standalone node for AAA. As a test, only one network device is configured with ISE to carryout the AAA processes.   I would like to know, if possible, how to configure Cisco ISE using the CLI. Is there a way to completely bypass the Admin web GUI and carryout all tasks via the CLI. For example, adding new network device, creating authentication and authorization policies, etc., using CLI.   Cisco ISE CLI reference guide does list some of the CLI commands, however, I could not find anything about adding network devices or policies. ... View more