WEBVTT

1
00:00.000 --> 00:01.270 align:middle line:84%


2
00:01.270 --> 00:04.210 align:middle line:90%
It may seem obvious to many,
but one of the very first things

3
00:04.210 --> 00:06.790 align:middle line:90%
that we have to have, if we're
going to do authentication

4
00:06.790 --> 00:10.150 align:middle line:90%
to verify who somebody is,
is have that person's record,

5
00:10.150 --> 00:11.470 align:middle line:84%
that information somewhere.

6
00:11.470 --> 00:14.590 align:middle line:90%
Now, that can be stored
in ISE as a local entity,

7
00:14.590 --> 00:16.600 align:middle line:90%
or a local identity,
or you can have

8
00:16.600 --> 00:18.580 align:middle line:90%
that information
on Active Directory

9
00:18.580 --> 00:20.260 align:middle line:90%
and pull the
information from there.

10
00:20.260 --> 00:23.290 align:middle line:90%
This is the home and summary
page for the Identity Services

11
00:23.290 --> 00:23.950 align:middle line:84%
Engine.

12
00:23.950 --> 00:26.890 align:middle line:90%
And if we want to take
a look at the local user

13
00:26.890 --> 00:28.538 align:middle line:90%
database, or the
local identities

14
00:28.538 --> 00:30.580 align:middle line:90%
that we can see or hear,
one way of getting there
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

14
00:28.538 --> 00:30.580 align:middle line:90%
that we can see or hear,
one way of getting there

15
00:30.580 --> 00:32.380 align:middle line:84%
is to hover over Work Centers.

16
00:32.380 --> 00:34.760 align:middle line:90%
And they've organized things
for us here, which is great.

17
00:34.760 --> 00:37.580 align:middle line:90%
And if we go down
to Network Access,

18
00:37.580 --> 00:39.675 align:middle line:90%
and from the dropdown we
could go to Identities,

19
00:39.675 --> 00:41.050 align:middle line:90%
if we look at the
breadcrumbs, it

20
00:41.050 --> 00:44.110 align:middle line:90%
will be Work Centers,
and then Network Access,

21
00:44.110 --> 00:45.490 align:middle line:84%
and then Identities.

22
00:45.490 --> 00:48.700 align:middle line:90%
And here we can locally store on
this identity services engine,

23
00:48.700 --> 00:50.620 align:middle line:90%
we could store information
about endpoints

24
00:50.620 --> 00:53.780 align:middle line:90%
like computers and store
information about users.

25
00:53.780 --> 00:56.110 align:middle line:90%
If we wanted to create
a new local user on ISE,

26
00:56.110 --> 00:58.960 align:middle line:90%
we could click on
Network Access Users.

27
00:58.960 --> 01:01.780 align:middle line:90%
And I have a user here called
Bob that I was practicing with.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

27
00:58.960 --> 01:01.780 align:middle line:90%
And I have a user here called
Bob that I was practicing with.

28
01:01.780 --> 01:03.280 align:middle line:90%
Go ahead and just
put a check there.

29
01:03.280 --> 01:04.420 align:middle line:84%
We'll get rid of Bob.

30
01:04.420 --> 01:07.412 align:middle line:90%
And that way we can demonstrate
how to create a new local user,

31
01:07.412 --> 01:08.620 align:middle line:84%
if that's what we plan to do.

32
01:08.620 --> 01:12.370 align:middle line:90%
So we can click on Add, and
we'll put in local sample user.

33
01:12.370 --> 01:14.330 align:middle line:90%
And then we'll
specify a password,

34
01:14.330 --> 01:16.550 align:middle line:84%
and we'll confirm the password.

35
01:16.550 --> 01:19.090 align:middle line:90%
And then we'll scroll
down and click on Submit.

36
01:19.090 --> 01:21.490 align:middle line:90%
Now, it doesn't
make a lot of sense

37
01:21.490 --> 01:23.500 align:middle line:90%
to do all of our management
with local users,

38
01:23.500 --> 01:25.162 align:middle line:90%
because if we have
thousands of users

39
01:25.162 --> 01:27.370 align:middle line:90%
we're going to want to tie
into something much bigger

40
01:27.370 --> 01:29.080 align:middle line:84%
like Active Directory.

41
01:29.080 --> 01:31.660 align:middle line:90%
To train ISE that it should
work with an external server
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

41
01:29.080 --> 01:31.660 align:middle line:90%
To train ISE that it should
work with an external server

42
01:31.660 --> 01:35.200 align:middle line:90%
like Active Directory, we'd
go to External ID Sources.

43
01:35.200 --> 01:37.690 align:middle line:90%
And here we have LDAP, and
ODBC, and other options

44
01:37.690 --> 01:39.010 align:middle line:84%
under Active Directory.

45
01:39.010 --> 01:41.220 align:middle line:90%
Right here, we can go
ahead and click on Add

46
01:41.220 --> 01:44.560 align:middle line:90%
and put the details about
joining this identity services

47
01:44.560 --> 01:46.210 align:middle line:84%
engine [INAUDIBLE] domain.

48
01:46.210 --> 01:49.510 align:middle line:90%
And if we continue to integrate
ISE with Active Directory,

49
01:49.510 --> 01:51.760 align:middle line:90%
at some point it's
going to ask, hey,

50
01:51.760 --> 01:53.560 align:middle line:90%
what is the username
that you can

51
01:53.560 --> 01:55.660 align:middle line:90%
use that has the
authority or the rights

52
01:55.660 --> 01:58.780 align:middle line:90%
to add this ISE device
into Active Directory?

53
01:58.780 --> 02:01.570 align:middle line:90%
Now, not only can we look up
user names in Active Directory
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

53
01:58.780 --> 02:01.570 align:middle line:90%
Now, not only can we look up
user names in Active Directory

54
02:01.570 --> 02:03.310 align:middle line:90%
and use those and
validate those user

55
02:03.310 --> 02:05.770 align:middle line:90%
accounts, but we can
also use group membership

56
02:05.770 --> 02:07.150 align:middle line:84%
in Active Directory.

57
02:07.150 --> 02:10.300 align:middle line:90%
It gives us a central point
of management for our group

58
02:10.300 --> 02:12.400 align:middle line:90%
memberships and our
users that we can then

59
02:12.400 --> 02:15.850 align:middle line:90%
leverage by having ISE dip
into that and do those queries.

60
02:15.850 --> 02:18.010 align:middle line:90%
So in the very next video,
here's what we'll do--

61
02:18.010 --> 02:20.170 align:middle line:90%
we'll walk through
from soup to dessert

62
02:20.170 --> 02:22.600 align:middle line:90%
the integration of an
identity services engine

63
02:22.600 --> 02:23.883 align:middle line:84%
with Active Directory.

64
02:23.883 --> 02:25.300 align:middle line:90%
And we'll extract
information just

65
02:25.300 --> 02:26.583 align:middle line:84%
to verify that it's working.

66
02:26.583 --> 02:28.750 align:middle line:90%
So, I'll see you in the
next video for exactly that.

67
02:28.750 --> 02:31.270 align:middle line:90%
Meanwhile, I hope this has
been informative for you,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

67
02:28.750 --> 02:31.270 align:middle line:90%
Meanwhile, I hope this has
been informative for you,

68
02:31.270 --> 02:34.590 align:middle line:90%
and I'd like to thank
you for viewing.