Cisco Ise 14 User Guide

Accessing the Cisco ISE CLI with Secure Shell
CiscoISEispre-configuredthroughthesetuputilitytoacceptaCLIadministrator.TologinwithaSSH
client(connectingtoawiredWideAreaNetwork(WAN)viaasystembyusingWindowsXPorlaterversions),
loginasanadministrator.
Before You Begin
ToaccesstheCiscoISECLI,useanySecureShell(SSH)clientthatsupportsSSHv2.
Step 1UseanySSHclientandstartanSSHsession.
Step 2PressEnterorSpacebartoconnect.
Step...

Cisco ISE CLI Administrator Account
Duringsetup,youarepromptedtoenterausernameandpasswordthatcreatestheCLIadministratoraccount.
LogintotheCiscoISEserverusingthisaccountwhenrestartingaftertheinitialconfigurationforthefirst
time.
YoumustalwaysprotecttheCLIadministratoraccountcredentials,andusethisaccounttoexplicitlycreate
andmanageadditionaladministratoranduseraccountswithaccesstotheCiscoISEserver.
CLIadministratorscanexecuteallcommandstoperformsystem-levelconfigurationinEXECmodeandother...

Cisco ISE CLI User Accounts
AnyuserwhoseaccountyoucreatefromtheCiscoISEAdminportalcannotautomaticallylogintotheCisco
ISECLI.YoumustexplicitlycreateuseraccountswithaccesstotheCLIusingtheCLIadministratoraccount.
Creating a Cisco ISE CLI User Account
YoumustruntheusernamecommandinconfigurationmodetocreateCLIuseraccounts.
Step 1LogintotheCiscoISECLIusingtheCLIadministratoraccount.
Step 2Enterintoconfigurationmodeandruntheusernamecommand....

Cisco ISE CLI User Account Privileges
Useraccountshaveaccesstoarestrictednumberofcommands,includingthefollowingcommands:
•crypto
•exit
•nslookup
•ping
•ping6
•showcdp
•showclock
•showcpu
•showdisks
•showicmp_status
•showinterface
•showinventory
•showlogins
•showmemory
•showntp
•showports
•showprocess
•showterminal
•showtimezone
•showudi
•showuptime
•showversion
•ssh
•telnet
•terminal
•traceroute
   Cisco Identity Services Engine CLI Reference Guide, Release 1.4
6
Cisco ISE Command-Line Interface
Cisco...

Supported Hardware and Software Platforms for Cisco ISE CLI
YoucanconnecttotheCiscoISEserverandaccesstheCLIusingthefollowing:
•AsystemrunningMicrosoftWindowsXP/Vista.
•AsystemrunningLinux,suchasRedHatorFedora.
•AnApplecomputerrunningMacOSX10.4orlater.
•AnyterminaldevicecompatiblewithVT100orANSIcharacteristics.OnVT100-typeandANSIdevices,
youcanusecursor-controlandcursor-movementkeysincludingtheleftarrow,rightarrow,uparrow,...

   Cisco Identity Services Engine CLI Reference Guide, Release 1.4
8
Cisco ISE Command-Line Interface
Supported Hardware and Software Platforms for Cisco ISE CLI 

Cisco ISE CLI Commands in EXEC Mode
ThischapterdescribestheCiscoISEcommand-lineinterface(CLI)commandsusedinEXECmode.Each
commandinthischapterisfollowedbyabriefdescriptionofitsuse,commandsyntax,usageguidelines,
andoneormoreexamples.
•CiscoISECLISessionBeginsinEXECMode,page11
•applicationinstall,page12
•applicationconfigure,page14
•applicationremove,page24
•applicationreset-config,page26
•applicationreset-passwd,page28
•applicationstart,page30
•applicationstop,page33
•applicationupgrade,page35...

•help,page68
•mkdir,page69
•nslookup,page70
•password,page72
•patchinstall,page73
•patchremove,page75
•ping,page77
•ping6,page79
•reload,page81
•restore,page82
•rmdir,page87
•ssh,page88
•tech,page90
•telnet,page92
•terminallength,page93
•terminalsession-timeout,page94
•terminalsession-welcome,page95
•terminalterminal-type,page96
•traceroute,page97
•undebug,page98
•write,page101
   Cisco Identity Services Engine CLI Reference Guide, Release 1.4
10
Cisco ISE CLI Commands in EXEC Mode 

Cisco ISE CLI Session Begins in EXEC Mode
WhenyoustartasessionintheCiscoISECLI,youbegininEXECmode.InEXECmode,youhavepermissions
toaccesseverythingintheCiscoISEserverandperformsystem-levelconfigurationandgenerateoperational
logs.
Cisco Identity Services Engine CLI Reference Guide, Release 1.4    
11
Cisco ISE CLI Commands in EXEC Mode
Cisco ISE CLI Session Begins in EXEC Mode 

application install
Youarenotallowedtoruntheapplicationinstallcommandfromthecommand-lineinterface(CLI)under
normaloperationsbecausetheCiscoIdentityServicesEngine(ISE)applicationispre-installedwitha
CiscoIOSimageonallsupportedappliancesandVMware.
Note
ToinstallaspecificapplicationotherthanCiscoISE,usetheapplicationinstallcommandinEXECmode.
ToremoveanapplicationotherthanCiscoISE,usetheapplicationremovecommand.
application[install{application-bundle}{remote-repository-name}]
Syntax...