Provides step-by-step instructions on how to install and configure the Cisco ISE Cloud Central Agent and start cloud tethering.
Use this procedure to install the Cisco ISE Cloud Central Agent on the PAN and start cloud tethering.
Follow these steps to install and configure the Cisco ISE Cloud Central Agent in the Cisco ISE CLI after you create the integration, download the Cisco ISE Cloud Central Agent installation package, and copy the tethering token.
Procedure
-
Log in to the Cisco ISE CLI over SSH on the PAN.
-
From the Cisco ISE CLI, run this command to install the Cisco ISE Cloud Central Agent: application install ISE-CLOUD-CENTRAL-AGENT-bundle-spa-<version>.tar.gz. The file name is auto-updated.
The standard Cisco application installation process checks that your Cisco ISE appliance meets the requirements and starts the agent's initial setup service.
The Cisco ISE Cloud Central Agent installer installs the agent in four simple steps. It hides the secrets you enter in the Cisco ISE CLI and does not store them.
-
When prompted during installation, enter these details in the Cisco ISE CLI:
-
Connect to Cisco Cloud Control: Enter the Cisco ISE tethering token copied from Cisco Cloud Control. If Cisco ISE uses a proxy to reach the internet, enter an HTTPS proxy in host:port format.
If the tethering token is rejected, it may have expired or already been used.
Open the integration’s edit page and reset the agent credentials to generate a new token. Enter the replacement token at the CLI prompt. You do not need to reinstall the agent.
-
Configure the ISE connection and pxGrid client: The Cisco ISE node details are populated by default.
You must enter the Cisco ISE administrator username and password.
You can create a pxGrid client, or use an existing registered and approved pxGrid client.
When creating a new pxGrid client, if one with that name already exists, use a different name.
The Cisco ISE Cloud Central Agent installer enables pxGrid if needed, which can restart Cisco ISE application services.
-
Start the ISE Cloud Central Agent: The installer uses the provided details to install the Cisco ISE Cloud Central Agent.
-
Check the pxGrid connection: Validate that the pxGrid client is active.
It might take upto 90 seconds for a new client to become active. You must approve any new pxGrid clients in Cisco ISE (choose and approve the new pxGrid client).
The Cisco ISE Cloud Central Agent installation remains halted until any new pxGrid client is approved in Cisco ISE.
After successful installation,
Setup complete is displayed in the Cisco ISE CLI.
The ISE Cloud Central Agent GUI link is also displayed in the Cisco ISE CLI. This GUI link can be used to monitor or change the settings of the tethered Cisco ISE Cloud Central Agent.
-
In a browser that can reach the Cisco ISE Admin IP address, open: https://<ISE-IP>/ise-cloud-central-agent/setup/.
The ISE Cloud Central Agent setup page opens. You can use this page to update or modify the settings of the currently tethered Cisco ISE Cloud Central Agent.
-
In the Verify ISE credentials page:
-
Enter your Cisco ISE administrator username and password.
-
Select Verify ISE credentials.
-
After your Cisco ISE node is successfully verified, you can use the Agent configuration page to modify the proxy host and pxGrid client details of your tethered Cisco ISE Cloud Central Agent.
-
If Cisco ISE uses a proxy to reach the internet, enter an HTTPS proxy in host:port format in Proxy host and Proxy port. The default port is 80. Leave the proxy host blank for a direct connection.
-
To continue using the same pxGrid client, do not modify the name in pxGrid client name.
To create a new pxGrid client, enter a different name in pxGrid client name. When creating a new pxGrid client, if one with that name already exists, you must use a different name.
-
Click Apply configuration to save and apply any changes.
The Agent status section displays the agent name, IP address, agent status, uptime, connected Cisco ISE IP address, and pxGrid client name.
The Configuration progress section displays the current status and activity logs of the agent configuration.
What to do next
Return to the New Cisco Identity Services Engine (ISE) Integration page in Cisco Cloud Control and complete the final step in Integrate an on-premises Cisco ISE deployment with Cisco ISE Cloud Central.
Then verify the connection by referring to Verify the Cisco ISE Cloud Central Agent connection.