Cisco Ise 14 User Guide
Here you can view all the pages of manual Cisco Ise 14 User Guide. The Cisco manuals for Interface are available online for free. You can easily download all the documents as PDF.
Page 161
Switch to Configuration Mode in EXEC Mode InEXECmode,youcanenterintoconfigurationmodebyrunningtheconfigureorconfigureterminal(conf t)command. YoucannotenterconfigurationcommandsdirectlyinEXECmodefromtheCiscoISECLI.Someofthe configurationcommandsrequireyoutoentertheconfigurationsubmodetocompletethecommand configuration. Toexitconfigurationmode,entertheexit,end,orCtrl-zcommand. Configurationcommandsincludeinterface,PolicyList,andrepository....
Page 162
synflood-limitConfigureaTCPSYNpacketratelimitusernameUsercreation Step 3Enterintotheconfigurationsubmode.Theconfigurationmodehasseveralconfigurationsubmodes.Eachofthese submodesplacesyoudeeperintheprompthierarchy.Fromthislevel,youcanentercommandsdirectlyintotheCisco ISEconfiguration. ise/admin(config)#interfaceGigabitEthernet0ise/admin(config-GigabitEthernet)# Step 4EnterexitinsequenceatthecommandprompttoexitbothConfigurationandEXECmodes.Whenyouenterexit,Cisco...
Page 163
CLI Configuration Command Default Settings CLIconfigurationcommandscanhaveadefaultform,whichreturnsthecommandsettingstothedefault values.Mostcommandsdisablebydefault,soinsuchcasesusingthedefaultformhasthesameresultas usingthenoformofthecommand. However,somecommandsareenabledbydefaultandhavevariablessettocertaindefaultvalues.Inthese cases,thedefaultformofthecommandenablesthecommandandsetsthevariablestotheirdefaultvalues. Cisco Identity Services Engine CLI Reference Guide, Release 1.4 155 Cisco ISE CLI...
Page 164
cdp holdtime TospecifytheamountoftimeforwhichthereceivingdeviceshouldholdaCiscoDiscoveryProtocolpacket fromtheCiscoISEserverbeforediscardingit,usethecdpholdtimecommandinconfigurationmode. cdpholdtimeseconds Toreverttothedefaultsetting,usethenoformofthiscommand. nocdpholdtime Syntax DescriptionSpecifiestheCiscoDiscoveryProtocolholdtimeadvertised.holdtime Advertisedholdtimevalue,inseconds.Thevaluerangesfrom10to 255seconds. seconds Command DefaultThedefaultCDPholdtime,insecondsis180. Command...
Page 165
cdp run ToenabletheCiscoDiscoveryProtocolonallinterfaces,usethecdpruncommandinconfigurationmode. cdprunGigabitEthernet TodisabletheCiscoDiscoveryProtocol,usethenoformofthiscommand. nocdprun Syntax DescriptionEnablestheCiscoDiscoveryProtocol.DisablestheCiscoDiscovery Protocolwhenyouusethenoformofthecdpruncommand. run (Optional).SpecifiestheGigabitEthernetinterfaceonwhichtoenable theCiscoDiscoveryProtocol. GigabitEthernet SpecifiestheGigabitEthernetinterfacenumberonwhichtoenable theCiscoDiscoveryProtocol....
Page 166
cdp timer TospecifyhowoftentheCiscoISEserversendsCiscoDiscoveryProtocolupdates,usethecdptimercommand inconfigurationmode. cdptimerseconds Toreverttothedefaultsetting,usethenoformofthiscommand. nocdptimer Syntax DescriptionRefreshesatthetimeintervalspecified.timer Specifieshowoften,inseconds,theCiscoISEserversendsCisco DiscoveryProtocolupdates.Thevaluerangesfrom5to254seconds. seconds Command DefaultThedefaultrefreshingtimeintervalvalue,insecondsis60. Command ModesConfiguration(config)# Usage...
Page 167
clock timezone Tosetthetimezone,usetheclocktimezonecommandinconfigurationmode. clocktimezonetimezone Todisablethetimezone,usethenoformofthiscommand. noclocktimezone Syntax DescriptionConfiguressystemtimezone.timezone Nameofthetimezonevisiblewheninstandardtime.Supportsupto 64alphanumericcharacters. timezone IfyouhavetheprimaryAdministrationnode(PAN)auto-failoverconfigurationenabled,disableitbeforeyou setthetimezone.Youcanenableitafterthetimezoneisset. Command DefaultCoordinatedUniversalTime(UTC) Command...
Page 168
DescriptionCommand showtimezone RestoringtheTimeZoneinCiscoISENodes CommonTimeZones AustraliaTimeZones AsiaTimeZones Cisco Identity Services Engine CLI Reference Guide, Release 1.4 160 Cisco ISE CLI Commands in Configuration Mode clock timezone
Page 169
Restoring the Time Zone in Cisco ISE Nodes WarningChangingthetimezoneonaCiscoISEapplianceafterinstallationcausestheCiscoISEapplication onthatnodetobeunusable.However,thepreferredtimezone(defaultUTC)canbeconfiguredduringthe installationwhentheinitialsetupwizardpromptsyouforthetimezones. ChangingtimezoneimpactsdifferentCiscoISEnodestypesofyourdeployment. Torecoverfromtheimpact,usethefollowingsteps: Standalone or Primary ISE Node...
Page 170
Common Time Zones Table 4: Table 4-1 Common Time Zones (Continued) Time Zone NameAcronym or name Europe GreenwichMeanTime,asUTCGMT,GMT0,GMT-0,GMT+0, UTC,Greenwich,Universal,Zulu BritishGB IrishGB-Eire,Eire WesternEuropeTime,asUTCWET CentralEuropeTime,asUTC+1hourCET EasternEuropeTime,asUTC+2hoursEET UnitedStatesandCanada EasternStandardTime,asUTC-5hoursEST,EST5EDT CentralStandardTime,asUTC-6hoursCST,CST6CDT MountainStandardTime,asUTC-7hoursMST,MST7MDT PacificStandardTime,asUTC-8hoursPST,PST8PDT...