ISE in a Hybrid Cloud Environment

Cisco ISE TME Charlie Moreton shows us how to provision and securely connect a distributed, 8-node ISE deployment on 7 platforms across on-premises hypervisors and multiple cloud providers!
00:00 Intro and Agenda
01:00 Previous Related ISE Webinars for Prerequisites:
- ISE On-Premises Installation: • ISE On-Premise Install...
- ISE REST APIs Introduction: • ISE REST APIs Introduc...
- Practical Ansible Automatons for ISE: • Practical ISE Automati...
- Automated ISE Provisioning and Patching: • Automated ISE Provisio...
02:11 ISE in the Public Cloud: Providers & Terminology
- AWS: cs.co/ise-aws | Free Tier: aws.amazon.com/free
- Azure: cs.co/ise-azure | Free Tier: azure.microsoft.com/en-us/free
- OCI: cs.co/ise-oci | Free Tier: www.oracle.com/cloud/free
04:17 Hypervisors
04:58 Zero-Touch Provisioning Configuration versus Cloud Instances: cs.co/ise-ztp
07:30 Planning Your ISE Node Deployment
08:57 Demo Lab Topology & Methodology
12:06 Ansible Modules and the Demo Playbooks: github.com/ISEDemoLab/ISE_in_...
13:32 7 Demo Scenarios Today
14:29 ISE Admin Users in GUI vs API
14:58 Demo: ISE Deployment and Ansible Inventory
19:38 Playbook #1: `01-show_version.yaml`
20:41 Enable ISE APIs using APIs
22:16 Password Reset Playbook
22:51 ISE FTP Repository for Importing SSH Public Key
24:15 Ansible Playbook for Playbooks: `main.yaml`
26:19 Demo: Deploy ISE into Azure
26:46 Playbook #2: `02-azure_deploy.yaml`
27:28 Azure Resource Group
28:26 `ansible.cfg`
28:59 Open a new terminal and virtual environment
29:49 Launch ISE in existing Resource Group `03-azure_existing_rg_deploy.yaml`
30:52 Review Azure deployments
31:30 Demo: ISE on VMware ESXi with Ansible
32:48 Provision ISE in VMware: `04-vmware_deploy.yaml`
34:31 ZTP with VMware
37:16 Review ISE running in Azure
39:03 Review additional playbooks
39:57 Demo: Remove PPAN Services: `08-remove_ppan_services.yaml`
40:30 Demo: Monitor ISE deployment nodes and services
42:03 Demo: Add nodes `09-add_nodes.yaml`
43:28 Demo: Create Node Groups: `10-create_node_groups.yaml`
44:52 Demo: ISE 3.2 System 360 Monitoring for multiple ISE nodes
47:18 Demo: Add DNS Record
50:48 Demo: SSH into ISE in Azure: `show application status ise`
51:24 Demo: Terminate VM Resources: `11-azure_destroy.yaml` and `12-vmware_destroy.yaml`
54:21 Azure VPN Connections to Cisco CSR, Meraki MX, and friends
58:31 GitHub Repository: github.com/ISEDemoLab/ISE_in_...
Resources
- ISE Zero-Touch Provisioning: cs.co/ise-ztp
- GitHub Repository: github.com/ISEDemoLab/ISE_in_...
- ISE Resources : cs.co/ise-resources
- ISE Community : cs.co/ise-community
- ISE Integration Guides : cs.co/ise-guides
- ISE Compatibility : cs.co/ise-compatibility
- ISE Webinars : cs.co/ise-webinars
- ISE TH-cam Channel : cs.co/ise-videos
- ISE Licensing & Evaluations : cs.co/ise-licensing
- ISE in Cisco DevNet: cs.co/ise-devnet
- ISE API Reference: cs.co/ise-api