20210713 TechFieldDay - Future Cloud - Cisco Identity Services Engine (ISE) in AWS with Ansible Automation

ISE 3.1 will be available as a native Amazon Machine Image (AMI) and customers want to use automation tools to provision their deployments whether on-premises, using cloud providers, or hybrid. This session will demonstrate how you can use the new cisco.ise Ansible modules to generate configurations from existing deployments and begin to incorporate them into their daily policy management and lifecycle orchestration.

Presentation and Demos

Watch the TechFieldDay presentation and demo from the recording in YouTube.

Quick Start

If you want to play with the cisco.ise Ansible collection, this is a summary of the commands you will need to run to get started.

# Use a virtual environment to prevent conflicts with other projects
pip install --upgrade pip
pip install pipenv
pipenv install --python 3.9
pipenv shell

# Install Python packages
python -m pip install ansible
python -m pip install ciscoisesdk
python -m pip install jmespath  # required for community.general JSON queries


# Install Ansible collections
ansible-galaxy collection install cisco.ise
ansible-galaxy collection install community.general

# set a nice prompt and some environment variables to eliminate warnings
source source_me.sh

If you have any problems installing Python or Ansible, see the official Installing Ansible guide.

Clone this repository to your local lab or sandbox environment :

git clone https://github.com/1homas/20210713_ISE_TechFieldDay.git

cd 20210713_ISE_TechFieldDay

Deploy

The steps below assume you will be cloning this repository into the DevNet Sandbox and running it there. If you use them in your own lab then you will need to create a different hosts file and update the credentials.yaml file for your environment.

ansible-playbook -i hosts.dCloud.ini Deploy/Deploy_ISE_Tasks.yaml 

ansible-playbook -i hosts.DevNet.ini Deploy/Deploy_ISE_Tasks.yaml 

ansible-playbook -i hosts.AWS.ini Deploy/Deploy_ISE_Tasks.yaml

Resources

• ciscoisesdk Python Package : API Docs | Repository
• cisco.ise Ansible Modules : Documentation | Repository
• Cisco DevNet Sandbox: ISE with Ansible Automation
• ISE APIs, Ansible, and Automation DevNet Learning Lab

License

The examples in this repository are licensed under the Cisco Sample Code License.