Automated ISE Provisioning and Patching (in AWS using Ansible) скачать в хорошем качестве

Automated ISE Provisioning and Patching (in AWS using Ansible)

Cisco ISE TME Thomas Howard shows how to use Ansible to provision and patch a 6-node ISE deployment into AWS! 00:00 Intro and Agenda with Slido Questions 5:09 Ansible Overview 7:19 ISE Deployment and Operational Lifecycle 8:55 YAML (YAML Ain't Markup Language) Review 12:08 Typical Ansible Project Folders 13:40 The 7 Ansible Playbooks we will be running 15:19 Github Repository: https://github.com/1homas/ISE_Provisi... 16:21 Demo: Ansible Environment Setup ``` git clone https://github.com/1homas/ISE_Provisi... pip install --upgrade pip pipenv install --python 3.9 pipenv install bcrypt passlib pipenv install paramiko pipenv install ansible ciscoisesdk jmespath pipenv install boto3 botocore pipenv shell source ~/.secrets/aws.sh source ~/.secrets/ise_aws.sh source ~/.secrets/ise_repository.sh ``` 18:08 Slido Question: How many ISE nodes are in your production ISE deployment? 18:51 Review ISE Provisioning Process in AWS 21:34 Demo: `ansible-playbook 1_provision--ask-pass.yaml --ask-pass` 26:21 Ansible Callbacks for profiling task times 27:11 ISE CLI with Ansible: https://community.cisco.com/t5/securi... 28:10 Slido Question: How many unique users login to your production ISE deployment? 29:32 Slido Question: How many timezones are your ISE users in? 30:28 ISE Facts Review 31:33 Demo: `ansible-playbook 2_ise_facts.yaml` 33:13 Ansible cisco.ise v2.6.8 Environment Variable Support 33:59 Slido Question: How many hours does it typically take you to apply a patch to your ISE deployment? 34:48 Demo: `ansible-playbook 3_patch.yaml` 40:12 Demo: `ansible-playbook 4_deployment.yaml` 44:02 Demo: `ansible-playbook 5_configuration.yaml` 45:24 Demo: Test RADIUS Authentication & Authorization 46:46 ISE API Bugs 47:49 Demo: `ansible-playbook 6_backup_now.yaml` 50:51 Demo: `ansible-playbook 7_destroy.yaml` 52:46 Slido Question: How many hours did your last ISE Upgrade take? 53:51 Slido Question: What is a reasonable amount of time in hours for an ISE Upgrade? Resources: Github Repository: https://github.com/1homas/ISE_Provisi... ISE CLI with Ansible: https://community.cisco.com/t5/securi...