⊹ ISE ⊹

ISE Certificate lab

ISE Certificate lab

Download CA certificate and upload it to the Trusted store of ISE

We will select this option “Trust for client authentication and Syslog” as certificate presented to ISE during EAP TLS 802.1x authentication will be certificates issued by this same CA

Create CSR for Admin usage

enter DNS Name as $FQDN$
and also enter second DNS name as wildcard with remaining domain name *.or2.sys.cisco
and also add the SAN entry of type IP address with value of 172.16.32.12

ISE gave this error

So I removed first entry of $FQDN$

it is trusted now in browser if we access it on its FQDN

CN is the FQDN of the ISE

more…

coming soon

next post

Clear /opt on all ISE nodes

When /opt fills up to 99% , application state of ISE goes into INIT state it stops processing requests

Clicking on “Delete Local Logs Now” clears up /opt

next post

Shutdown ISE node 

application stop ise
halt

next post

ISE EVENG deployment 

mkdir /opt/unetlab/addons/qemu/ise-3.3.0-430.SPA/
cd /opt/unetlab/addons/qemu/ise-3.3.0-430.SPA/
mv Cisco-ISE-3.3.0.430.SPA.x86_64.iso cdrom.iso
/opt/qemu/bin/qemu-img create -f qcow2 virtioa.qcow2 200G


Create new LAB in the EVE and add new ISE node, Connect it to management switch. Settings for ISE node are: CPU x4, RAM x16384M, 1 xEthernet. Console VNC, during install first time.
-machine type=pc,accel=kvm -smbios type=1,product=KVM -serial mon:stdio -nographic -no-user-config -nodefaults -display none -vga std -rtc base=utc
Start ISE node and when setup prompt appears, shutdown ISE node.

Commit created image for further use

Get lab id from Lab details 

! EVE CLI: Convert image from lab tmp folder to defaults image location. In the command below is used lab ID (above) and as we added on lab single node, node ID is 1. ISE image foldername match what we created before. Number 0 in the line below is user POD number. Admin pod is 0.

cd /opt/unetlab/tmp/0/74b3a1cc-bfd0-4a29-8d28-941daa450499/1/
qemu-img commit virtioa.qcow2

rm -f /opt/unetlab/addons/qemu/ise-3.3.0-430.SPA/cdrom.iso

/opt/unetlab/wrappers/unl_wrapper -a fixpermissions 

! Advanced instructions on how to make your image smaller in size (sparsify&compress). RECOMMENDED !

cd /opt/unetlab/addons/qemu/ise-3.3.0-430.SPA/
virt-sparsify  --compress virtioa.qcow2 compressedvirtioa.qcow2
mv virtioa.qcow2 orig.qcow2
mv compressedvirtioa.qcow2 virtioa.qcow2
! if everything looks good then delete the original qcow2 image 
rm orig.qcow2

next post