Automated ISE Provisioning and Patching (in AWS using Ansible)

Cisco ISE TME Thomas Howard shows how to use Ansible to provision and patch a 6-node ISE deployment into AWS!

00:00 Intro and Agenda with Slido Questions
5:09 Ansible Overview
7:19 ISE Deployment and Operational Lifecycle
8:55 YAML (YAML Ain't Markup Language) Review
12:08 Typical Ansible Project Folders
13:40 The 7 Ansible Playbooks we will be running
16:21 Demo: Ansible Environment Setup
```
pip install --upgrade pip
pipenv install --python 3.9
pipenv install bcrypt passlib
pipenv install paramiko
pipenv install ansible ciscoisesdk jmespath
pipenv install boto3 botocore
pipenv shell
```
18:08 Slido Question: How many ISE nodes are in your production ISE deployment?
18:51 Review ISE Provisioning Process in AWS
26:21 Ansible Callbacks for profiling task times
28:10 Slido Question: How many unique users login to your production ISE deployment?
29:32 Slido Question: How many timezones are your ISE users in?
30:28 ISE Facts Review
33:59 Slido Question: How many hours does it typically take you to apply a patch to your ISE deployment?
45:24 Demo: Test RADIUS Authentication & Authorization
46:46 ISE API Bugs
52:46 Slido Question: How many hours did your last ISE Upgrade take?
53:51 Slido Question: What is a reasonable amount of time in hours for an ISE Upgrade?

Resources:

[RyanBess]

@33:13 where discussing using environment variables. Wouldn't this be the responsibility of Cisco ISE Ansible modules to support looking where creds are and not dependent on the version of ISE you are running?

[iarnopagliani]

What radius test client are you using under OSX?