当您在思科 ISE CLI 中启动会话时，您应在执行模式下开始。在执行模式下，您有权访问思科 ISE 服务器中的所有项目、执行系统级别的配置，以及生成运行日志。

注	application install 命令只能用于安装热补丁。

要删除思科 ISE 之外的特定应用，请在执行模式下使用 application install 命令。要删除思科 ISE 之外的应用，请使用 application remove 命令。

application [ install {application-bundle} {remote-repository-name}]

Syntax Description

示例

ise/admin# application install ise-hotpatch-appbundle-x.x.tar.gz myrepository
Do you want to save the current configuration? (yes/no) [yes]? yes
Generating configuration...
Saved the running configuration to startup successfully
Initiating Application installation...
Extracting ISE database content...
Starting ISE database processes...
Restarting ISE database processes...
Creating ISE M&T session directory...
Performing ISE database priming...
Application successfully installed
ise/admin#

在执行模式下使用 application configure 命令：

• 执行 M&T 操作

• 刷新并显示与分析器相关的统计信息

• 导出和导入用于备份和恢复思科 ISE CA 证书及密钥的选项

• 生成关键性能指标 (KPM) 统计信息

• 启用或禁用 ISE 计数器属性数据集合

application [ configure {application-name}]

Syntax Description

Command History

示例

ise/admin# application configure ise

Selection configuration option
[1]Reset M&T Session Database
[2]Rebuild M&T Unusable Indexes
[3]Purge M&T Operational Data
[4]Reset M&T Database
[5]Refresh Database Statistics
[6]Display Profiler Statistics
[7]Export Internal CA Store
[8]Import Internal CA Store
[9]Create Missing Config Indexes
[10]Create Missing M&T Indexes
[12]Generate Daily KPM Stats
[13]Generate KPM Stats for last 8 Weeks
[14]Enable/Disable Counter Attribute Collection
[15]View Admin Users
[16]Get all Endpoints
[19]Establish Trust with controller
[20]Reset Context Visibility
[21]Synchronize Context Visibility With Database
[22]Generate Heap Dump
[23]Generate Thread Dump
[24]Force Backup Cancellation
[25]CleanUp ESR 5921 IOS Crash Info Files
[26]Recreate undotablespace
[27]Configure TCP params
[28]Reset Upgrade Tables and Proceed with upgrade
[29]Recreate Temp tablespace
[30]Clear Sysaux tablespace
[31]Fetch SGA/PGA Memory usage
[32]Generate Self-Signed Admin Certificate
[33]View Certificates in NSSDB or CA_NSSDB
[0]Exit

注	思科 ISE 3.0 及更高版本不支持无线设置（Wifi 设置）。

注	思科 ISE 3.1 及更高版本不支持 ACS 迁移。

注	不允许从命令行界面 (CLI) 运行 application remove 命令来删除思科 ISE，除非您收到明确指示，为进行升级而执行此操作。

要删除思科 ISE 之外的特定应用，请在执行模式下使用 application remove 命令。

application [ remove {application-name}]

如果不想删除思科 ISE 之外的任何其他应用，请使用此命令的 no 形式。

no application [ remove {application-name}]

Syntax Description

示例

ise/admin# application remove ise
Continue with application removal? [y/n] y
Application successfully uninstalled
ise/admin#

要将思科 ISE 应用配置重置为出厂默认设置或保留现有的出厂设置，请在执行模式下使用 application reset-config 命令。除了自签名的证书之外，您还可以重置服务器证书或保留现有的服务器证书。

application [ reset-config {application-name}]

Syntax Description

示例

如果用户选择 No 选项，则命令会删除服务器证书并只重新生成自签名的证书。如果用户选择 Yes 选项，则命令会通过将服务器证书导出到某个位置来保留现有的服务器证书。之后，系统会从此位置导入服务器证书。

Initialize your ISE configuration to factory defaults? (y/n): y
Leaving currently connected AD domains if any...
Please rejoin to AD domains from the administrative GUI
Retain existing ISE server certificates? (y/n): y
Reinitializing local ISE configuration to factory defaults...
Stopping ISE Monitoring & Troubleshooting Log Processor...
PassiveID WMI Service is disabled
PassiveID Syslog Service is disabled
PassiveID API Service is disabled
PassiveID Agent Service is disabled
PassiveID Endpoint Service is disabled
PassiveID SPAN Service is disabled
ISE pxGrid processes are disabled
Stopping ISE Application Server...
Stopping ISE Certificate Authority Service...
Stopping ISE EST Service...
ISE Sxp Engine Service is disabled
Stopping TC-NAC Service ...
Stopping container irf-core-engine-runtime
Stopping container irf-rabbitmq-runtime
Stopping container irf-mongo-runtime
Stopping VA Service...
Stopping ISE VA Database...
Stopping container wifisetup-container
Stopping docker daemon...
Stopping ISE Profiler Database...
Stopping ISE Indexing Engine...
Stopping ISE Monitoring & Troubleshooting Session Database...
Stopping ISE AD Connector...
Stopping ISE Database processes...
Enter the ISE administrator username to create[admin]: 
Enter the password for 'admin': 
Re-enter the password for 'admin': 
Extracting ISE database content...
Starting ISE database processes...
Creating ISE M&T session directory...
Creating ISE VA timesten database...
Performing ISE database priming...
Starting ISE Indexing Engine...
TimeoutStartUSec=20min
TimeoutStopUSec=20min
Cleaning up TC-NAC docker configuration...

Starting docker daemon ...
irf-core-engine-runtime is not running
irf-rabbitmq-runtime is not running
irf-mongo-runtime is not running
VA Service is not running
ISE VA Database is not running
Stopping docker daemon...
Calling wifi setup reset-config
application reset-config is success

在管理员帐户由于输入不正确的密码而被禁用之后，如果要为思科 ISE 中的指定用户账号（通常是现有的管理员帐户）重置管理员门户登录密码，请在执行模式下使用 application reset-passwd 命令。

application [ reset-passwd {application-name} {administrator-ID} ]

Syntax Description

如果您为管理员用户 ID 输入错误密码的次数超过指定次数，则管理员门户会“禁止您访问”系统。思科 ISE 会暂停该管理员用户 ID 的凭证，直到您有机会重置与其关联的密码。您只能在管理 ESS 节点 CLI 中重置管理员密码。

UTF-8 管理员用户只可以通过思科 ISE 管理员门户更改密码。

示例

ise/admin# application reset-passwd ise admin
Enter new password: ******
Confirm new password: ******
Password reset successfully.
ise/admin#

要启用特定应用，请在执行模式下使用 application start 命令。要禁止启动应用，请使用此命令的 no 形式。

application [ start {application-name [safe]}]

no application [ start {application-name [safe]}]

Syntax Description

示例 1

ise/admin# application start ise
Starting ISE Monitoring & Troubleshooting Session Database...
Starting ISE Profiler Database...
Starting ISE Application Server...
Starting ISE Monitoring & Troubleshooting Log Processor...
Starting ISE Indexing Engine...
Starting docker daemon ...
38a408c9a1c8
Starting container wifisetup-container
Starting ISE Certificate Authority Service...
Starting ISE AD Connector...
Starting ISE EST Service...
Note: ISE Processes are initializing. Use 'show application status ise'
      CLI to verify all processes are in running state. 

ise/admin# show application status ise

ISE PROCESS NAME                       STATE            PROCESS ID  
--------------------------------------------------------------------
Database Listener                      running          17893       
Database Server                        running          62 PROCESSES
Application Server                     running          21962       
Profiler Database                      running          19443       
ISE Indexing Engine                    running          23331       
AD Connector                           running          24955       
M&T Session Database                   running          19351       
M&T Log Processor                      running          22010       
Certificate Authority Service          running          24759       
EST Service                            running          891         
SXP Engine Service                     disabled                     
Docker Daemon                          running          24000       
TC-NAC Service                         disabled        
Wifi Setup Helper Container            running          24465       
 Wifi Setup Helper Vault               running          41          
 Wifi Setup Helper MongoDB             running          14          
 Wifi Setup Helper Web Server          running          213         
 Wifi Setup Helper Auth Service        running          123         
 Wifi Setup Helper Main Service        running          159         
 Wifi Setup Helper WLC Service         running          197         
pxGrid Infrastructure Service          disabled                     
pxGrid Publisher Subscriber Service    disabled                     
pxGrid Connection Manager              disabled                     
pxGrid Controller                      disabled                     
PassiveID WMI Service                  disabled                     
PassiveID Syslog Service               disabled                     
PassiveID API Service                  disabled                     
PassiveID Agent Service                disabled                     
PassiveID Endpoint Service             disabled                     
PassiveID SPAN Service                 disabled                     
DHCP Server (dhcpd)                    disabled                     
DNS Server (named)                     disabled                     

在安全模式下启动思科 ISE 应用

“safe”选项的目的是绕过可能无意导致的访问限制。当安全模式用于启动思科 ISE 服务时，应遵循以下行为：

• 如果管理员无意将自己锁定，则系统会暂时禁用 IP 访问限制，以允许管理员登录正确的 IP 访问限制。

• 在已启用 FIPS 的主机上，如果在应用启动时传递“safe”选项，则系统会暂时禁用 FIPS 完整性检查。通常，如果 FIPS 完整性检查失败，思科 ISE 服务不会启动。用户可以在应用启动时使用“safe”选项绕过 FIPS 完整性检查。

• 在已启用 FIPS 的主机上，如果在应用启动时传递“safe”选项，系统会禁用硬件随机数生成器完整性检查。

• 即使未在 ISE 上启用 FIPS 模式，思科 ISE 也会在 FIPS 模式下启动出站 SSH 或 SFTP 连接。确保与 ISE 通信的远程 SSH 或 SFTP 服务器允许 FIPS 140-2 批准的加密算法。

  思科 ISE 使用嵌入式 FIPS 140-2 验证加密模块。有关 FIPS 合规要求的详细信息，请参阅 FIPS 合规证明书。

• 如果使用基于证书的身份验证，有关应用启动的“safe”选项会暂时使用基于用户名和密码的身份验证。

注	这些更改只是临时的，只与思科 ISE 应用的该实例有关。如果思科 ISE 服务在不使用“safe”选项的情况下再次重新启动，所有默认功能将会恢复。

ise/admin# application stop ise
Stopping ISE Monitoring & Troubleshooting Log Processor...
PassiveID WMI Service is disabled
PassiveID Syslog Service is disabled
PassiveID API Service is disabled
PassiveID Agent Service is disabled
PassiveID Endpoint Service is disabled
PassiveID SPAN Service is disabled
ISE pxGrid processes are disabled
Stopping ISE Application Server...
Stopping ISE Certificate Authority Service...
Stopping ISE EST Service...
ISE Sxp Engine Service is disabled
Stopping TC-NAC Service ...
Error response from daemon: no such id: irf-core-engine-runtimeirf-core-engine-runtime is not running
Error response from daemon: no such id: irf-rabbitmq-runtimeirf-rabbitmq-runtime is not running
Error response from daemon: no such id: irf-mongo-runtimeirf-mongo-runtime is not running
VA Service is not running
ISE VA Database is not running
Stopping container wifisetup-container
Stopping docker daemon...
Stopping ISE Profiler Database...
Stopping ISE Indexing Engine...
Stopping ISE Monitoring & Troubleshooting Session Database...
Stopping ISE AD Connector...
Stopping ISE Database processes...


ise/admin# application start ise safe

Starting ISE Monitoring & Troubleshooting Session Database...
Starting ISE Profiler Database...
Starting ISE Application Server...
Starting ISE Monitoring & Troubleshooting Log Processor...
Starting ISE Indexing Engine...
Starting docker daemon ...
38a408c9a1c8
Starting container wifisetup-container
Starting ISE Certificate Authority Service...
Starting ISE AD Connector...
Note: ISE Processes are initializing. Use 'show application status ise'
      CLI to verify all processes are in running state. 
Starting ISE EST Service...

要启用特定应用，请在执行模式下使用 application stop 命令。要禁止停止应用，请使用此命令的 no 形式。

application [ stop {application-name}]

no application [ stop {application-name}]

Syntax Description

示例

ise/admin# application stop ise
Stopping ISE Monitoring & Troubleshooting Log Processor...
Stopping ISE Identity Mapping Service...
Stopping ISE pxGrid processes...
Stopping ISE Application Server...
Stopping ISE Certificate Authority Service...
Stopping ISE Profiler Database...
Stopping ISE Monitoring & Troubleshooting Session Database...
Stopping ISE AD Connector...
Stopping ISE Database processes...
ise//admin# show application status ise

ISE PROCESS NAME                       STATE            PROCESS ID
--------------------------------------------------------------------
Database Listener                      not running
Application Server                     not running
Profiler Database                      not running
AD Connector                           not running
M&T Session Database                   not running
M&T Log Processor                      not running
Certificate Authority Service          disabled
pxGrid Infrastructure Service          not running
pxGrid Publisher Subscriber Service    not running
pxGrid Connection Manager              not running
pxGrid Controller                      not running
Identity Mapping Service               not running
ise//admin#

要升级特定应用捆绑包，请在执行模式下使用 application upgrade 命令。

application [ upgrade{application-bundle} {remote-repository-name}]

Syntax Description

示例 1

ise/admin# application upgrade prepare ise-upgradebundle-3.x.0.x.x86_64.tar.gz local 

Getting bundle to local machine...
Unbundling Application Package...
Verifying Application Signature...

Application upgrade preparation successful

示例 2

ise/admin# application upgrade proceed 
Initiating Application Upgrade...
% Warning: Do not use Ctrl-C or close this terminal window until upgrade completes.
-Checking VM for minimum hardware requirements
STEP 1: Stopping ISE application...
STEP 2: Verifying files in bundle...
-Internal hash verification passed for bundle
STEP 3: Validating data before upgrade...
STEP 4: Taking backup of the configuration data...
STEP 5: Running ISE configuration database schema upgrade...
- Running db sanity to check and fix if any index corruption
- Auto Upgrading Schema for UPS Model
- Upgrading Schema completed for UPS Model
ISE database schema upgrade completed.
% Warning: Sanity test found some indexes missing in CEPM schema. Please recreate missing indexes after upgrade using app configure ise cli
STEP 6: Running ISE configuration data upgrade...
- Data upgrade step 1/14, UPSUpgradeHandler(2.3.0.100)... Done in 53 seconds.
- Data upgrade step 2/14, UPSUpgradeHandler(2.3.0.110)... Done in 1 seconds.
- Data upgrade step 3/14, NetworkAccessUpgrade(2.3.0.145)... Done in 0 seconds.
- Data upgrade step 4/14, NodeGroupUpgradeService(2.3.0.155)... Done in 0 seconds.
- Data upgrade step 5/14, IRFUpgradeService(2.3.0.155)... Done in 0 seconds.
- Data upgrade step 6/14, UPSUpgradeHandler(2.3.0.158)... Done in 0 seconds.
- Data upgrade step 7/14, NetworkAccessUpgrade(2.3.0.178)... Done in 0 seconds.
- Data upgrade step 8/14, NetworkAccessUpgrade(2.3.0.182)... Done in 0 seconds.
- Data upgrade step 9/14, CertMgmtUpgradeService(2.3.0.194)... Done in 3 seconds.
- Data upgrade step 10/14, UPSUpgradeHandler(2.3.0.201)... Done in 0 seconds.
- Data upgrade step 11/14, NSFUpgradeService(2.3.0.233)... Done in 0 seconds.
- Data upgrade step 12/14, ProfilerUpgradeService(2.3.0.233)... Done in 0 seconds.
- Data upgrade step 13/14, GuestAccessUpgradeService(2.3.0.233)... Done in 7 seconds.
STEP 7: Running ISE configuration data upgrade for node specific data...
STEP 8: Running ISE M&T database upgrade...
ISE M&T Log Processor is not running
ISE database M&T schema upgrade completed.
 
Gathering Config schema(CEPM) stats .... 
Gathering Operational schema(MNT) stats ..... 
% NOTICE: Upgrading ADEOS. Appliance will be rebooted after upgrade completes successfully.
warning: file /opt/xgrid/gc/pxgrid-controller-1.0.4.18-dist.tar.gz: remove failed: No such file or directory

% This application Install or Upgrade requires reboot, rebooting now...

Broadcast message from root@IS137 (pts/3) (Fri Jun  2 12:22:49 2017):

Trying to stop processes gracefully. Reload might take approximately 3 mins

Broadcast message from root@IS137 (pts/3) (Fri Jun  2 12:22:49 2017):

Trying to stop processes gracefully. Reload might take approximately 3 mins

Broadcast message from root@IS137 (pts/3) (Fri Jun  2 12:23:10 2017):

The system is going down for reboot NOW

Broadcast message from root@IS137 (pts/3) (Fri Jun  2 12:23:10 2017):

The system is going down for reboot NOW
The upgrade is now complete.

要执行包括思科 ISE 和思科 ADE OS 数据在内的备份并将备份存放在存储库中，请在执行模式下使用 backup 命令。

注

尝试在执行模式下使用 backup 命令之前，必须将运行配置复制到一个安全的位置（例如网络服务器），或者将其保存为思科 ISE 服务器启动配置。当您从备份和系统日志恢复或对思科 ISE 进行排除故障时，您可以使用此启动配置。 backup [{backup-name} repository {repository-name} ise-config encryption-key hash| plain {encryption-key name}] backup [{backup-name} repository {repository-name} ise-operational encryption-key hash| plain {encryption-key name}]

Syntax Description

要备份系统日志，请在执行模式下使用 backup-logs 命令。要删除该功能，请使用此命令的 no 形式。

注	尝试在执行模式下使用 backup-logs 命令之前，必须将运行配置复制到一个安全的位置（例如网络服务器），或者将其保存为思科 ISE 服务器启动配置。当您从备份和系统日志恢复或对思科 ISE 进行排除故障时，您可以使用此启动配置。

backup-logs backup-name repository repository-name {public-key | {encryption-key { hash | plain } encryption-key name}}

Syntax Description

示例 1

ise/admin# backup-logs Test repository disk encryption-key plain Test_1234 
% Creating log backup with timestamped filename: Test-141006-1351.tar.gpg 
% supportbundle in progress: Copying database config files...10% completed
% supportbundle in progress: Copying debug logs...20% completed
% supportbundle in progress: Copying local logs...30% completed
% supportbundle in progress: Copying monitor logs...40% completed
% supportbundle in progress: Copying policy xml...50% completed
% supportbundle in progress: Copying system logs...60% completed
% supportbundle in progress: Moving support bundle to the repository...75% completed 
% supportbundle in progress: Completing support bundle generation......100% completed
ise/admin#

示例 2

ise/admin# backup-logs test repository disk public-key
% Creating log backup with timestamped filename: new-pk-160520-0259.tar.gpg 
% supportbundle in progress: Copying database config files...10% completed
% supportbundle in progress: Copying debug logs...20% completed
% supportbundle in progress: Copying local logs...30% completed
% supportbundle in progress: Copying monitor logs...40% completed
% supportbundle in progress: Copying policy xml...50% completed
% supportbundle in progress: Copying system logs...60% completed
% supportbundle in progress: Moving support bundle to the repository...75% completed 
% supportbundle in progress: Completing support bundle generation......100% completed

要清除终端屏幕的内容，请在执行模式下使用 clear screen 命令。

clear screen

Syntax Description

Command History

要设置系统时钟，请在执行模式下使用 clock 命令。要禁用系统时钟设置，请使用此命令的 no 形式。

clock [ set {month day hh:min:ss yyyy}]

Syntax Description

独立或主要 ISE 节点

注	独立或主要 ISE 节点上不支持安装后更改系统时间。

如果您无意中更改了系统时间，请执行以下操作：

• 恢复到原始系统时间（更改前的时间）。

• 从该节点的 CLI 运行 application reset-config ise 命令。

• 在该节点上的时间更改之前，从最后一个已知的正确备份中恢复。

辅助 ISE 节点

注	在辅助节点上更改系统时间会导致其在您的部署中不可用。

要将辅助节点的系统时间与主要节点的系统时间同步，请执行以下操作：

• 取消注册辅助 ISE 节点。

• 更正系统时间，以便与主要 ISE 节点的系统时间同步。

• 从主 ISE 节点的 CLI 运行 application reset-config ise 命令。

• 将 ISE 节点重新注册为主要 ISE 节点的辅助 ISE 节点。

  注

  为确保您已在安装时设置正确的系统时间，安装向导会要求您指定网络时间协议 (NTP) 服务器并尝试与其同步。您必须确保在设置过程中配置的 NTP 服务器始终可访问，以便系统时间始终保持准确，特别是在极少数情况下，由于电源故障或 CMOS 电池失效，BIOS 时间可能会损坏时。此操作反过来可能会在重新启动过程中损坏思科 ADE-OS 系统时间。如果您在设置过程中未配置 NTP 服务器，则必须确保设置的系统 BIOS 时间与协调世界时 (UTC) 时区是相对的，如“Cisco Identity Services Engine Hardware Installation Guide”（思科身份服务引擎硬件安装指南）所述。

示例

ise/admin# clock set August 30 18:07:20 2013
ise/admin# show clock
Fri Aug 30 18:07:26 UTC 2013
ise/admin#

要清除终端屏幕的内容，请在执行模式下使用 cls 命令。

cls

Syntax Description

Command History

示例

以下示例显示了如何清除终端内容：

ise/admin# cls
ise/admin#

要进入配置模式，请在执行模式下使用 configure 命令。

configure terminal

Syntax Description

示例

ise/admin# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
ise/admin(config)#

要将文件从源复制到目标，请在执行模式下使用 copy 命令。

利用 copy 命令，可以将核心文件和堆转储从思科 ISE 复制到远程存储库。有关更多信息，请参阅复制日志文件部分的示例 3。

Syntax Description

示例

ise/admin# copy disk:/ filename repository repository_name

要生成新的公共密钥对、将当前公共密钥导出到存储库，以及将公共密钥导入到授权密钥列表，请在执行模式下使用 crypto 命令。您还可查看公共密钥信息和删除所选密钥。

crypto key [ delete {hash | authorized_keys | rsa}]

crypto key [ export {filename | repository}]

crypto key [ generate {rsa}]

crypto key [ import {filename | repository}]

crypto [host_key {add | delete}]

Syntax Description

示例 1

以下示例显示了 SFTP 存储库的密钥管理。

ise/admin# crypto key generate rsa
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
ise/admin# show crypto key
admin public key: ssh-rsa ad:14:85:70:fa:c3:c1:e6:a9:ff:b1:b0:21:a5:28:94 admin@ise
ise/admin# crypto key generate rsa
Private key for user admin already exists. Overwrite? y/n [n]: y
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
ise/admin# show crypto key 
admin public key: ssh-rsa 41:ab:78:26:48:d3:f1:6f:45:0d:99:d7:0f:50:9f:72 admin@ise
ise/admin# crypto key export mykey_rsa repository myrepository
ise/admin# show crypto key
admin public key: ssh-rsa f8:7f:8a:79:44:b8:5d:5f:af:e1:63:b2:be:7a:fd:d4 admin@ise
ise/admin# crypto key delete  f8:7f:8a:79:44:b8:5d:5f:af:e1:63:b2:be:7a:fd:d4
ise/admin#
ise/admin# crypto key delete rsa
ise/admin# show crypto key
ise/admin#

示例 2

以下示例显示可用于登录思科 ISE 的公钥的密钥管理。

ise/admin# show crypto authorized_keys
Authorized keys for admin
ise/admin# crypto key delete authorized_keys
ise/admin# show crypto authorized_keys
ise/admin#
ise/admin# crypto key import mykey_rsa repository myrepository
ise/admin# show crypto key
admin public key: ssh-rsa f8:7f:8a:79:44:b8:5d:5f:af:e1:63:b2:be:7a:fd:d4 admin@ise
ise/admin#

示例 3

ise/admin# crypto host_key add host ise
host key fingerprint added
# Host ise found: line 1 type RSA
2048 1d:72:73:6e:ad:f7:2d:11:ac:23:e7:8c:81:32:c5:ea ise (RSA)
ise/admin#
ise/admin# crypto host_key delete host ise
host key fingerprint for ise removed
ise/admin#

要显示已执行命令的错误或事件，请在执行模式下使用 debug 命令。

debug [ all | application | backup-restore | cdp | config | copy | icmp | locks | logging | snmp | system | transfer | user | utils ]

Syntax Description

示例

ise/admin# debug all
ise/admin# mkdir disk:/1
ise/admin# 6 [15347]: utils: vsh_root_stubs.c[2742] [admin]: mkdir operation success
ise/admin# rmdir disk:/1
6 [15351]: utils: vsh_root_stubs.c[2601] [admin]: Invoked Remove Directory disk:/1 command
6 [15351]: utils: vsh_root_stubs.c[2663] [admin]: Remove Directory operation success
ise/admin#
ise/admin# undebug all
ise/admin#

要从思科 ISE 服务器中删除文件，请在执行模式下使用 delete 命令。

delete [filename disk:/path]

Syntax Description

示例

ise/admin# delete disk:/hs_err_pid19962.log
ise/admin#

要列出思科 ISE 服务器的文件，请在执行模式下使用 dir 命令。

dir

dir disk:/logs

dir recursive

Syntax Description

示例 1

ise/admin# dir
Directory of disk:/
    2034113 Aug 05 2010 19:58:39 ADElogs.tar.gz
       4096 Jun 10 2010 02:34:03 activemq-data/
       4096 Aug 04 2010 23:14:53 logs/
      16384 Jun 09 2010 02:59:34 lost+found/
    2996022 Aug 05 2010 19:11:16 mybackup-100805-1910.tar.gz
       4096 Aug 04 2010 23:15:20 target/
       4096 Aug 05 2010 12:25:55 temp/
Usage for disk: filesystem
                 8076189696 bytes total used
                 6371618816 bytes free
                15234142208 bytes available
ise/admin#

示例 2

ise/admin# dir disk:/logs
0 Aug 05 2010 11:53:52 usermgmt.log
Usage for disk: filesystem
                 8076189696 bytes total used
                 6371618816 bytes free
                15234142208 bytes available
ise/admin#

示例 3

ise/admin# dir recursive
Directory of disk:/
    2034113 Aug 05 2010 19:58:39 ADElogs.tar.gz
       4096 Jun 10 2010 02:34:03 activemq-data/
       4096 Aug 04 2010 23:14:53 logs/
      16384 Jun 09 2010 02:59:34 lost+found/
    2996022 Aug 05 2010 19:11:16 mybackup-100805-1910.tar.gz
       4096 Aug 04 2010 23:15:20 target/
       4096 Aug 05 2010 12:25:55 temp/
Directory of disk:/logs
Directory of disk:/temp
Directory of disk:/activemq-data
Directory of disk:/activemq-data/localhost
Directory of disk:/activemq-data/localhost/journal
Directory of disk:/activemq-data/localhost/kr-store
Directory of disk:/activemq-data/localhost/kr-store/data
Directory of disk:/activemq-data/localhost/kr-store/state
Directory of disk:/activemq-data/localhost/tmp_storage
Directory of disk:/target
Directory of disk:/target/logs
Directory of disk:/lost+found
Usage for disk: filesystem
                 8076189696 bytes total used
                 6371618816 bytes free
                15234142208 bytes available
ise/admin#

要进入嵌入式服务路由器控制台，请在执行模式下使用 esr 命令。

esr

Syntax Description

要通过注销思科 ISE 服务器来关闭活动终端会话或要从配置模式向上移动一个模式层次，请在执行模式下使用 exit 命令。

此命令没有关键字和参数。

exit

示例

ise/admin# config t
Enter configuration commands, one per line.  End with CNTL/Z.
ise/admin(config)# exit
ise/admin#

要通过将用户注销思科 ISE 服务器来强制用户退出活动终端会话，请在执行模式下使用 forceout 命令。

forceout username

Syntax Description

示例

ise/admin# forceout user1
ise/admin#

要生成 符合思科 ISE 密码策略的用户密码，请在 EXEC 模式下使用 generate-password 命令。 。

Command History

示例

ise/admin# generate-password <username>
1pNn
ise/admin#configure terminal
Entering configuration mode terminal
ise/admin(config)#username <username> ?
Possible completions:
 password  Password and user role
ise/admin(config)#username <username> password plain ?
Description: Password. Use of % character must be escaped with (Max Size - 127)
Possible Completions:
 <AES encrypted string, min: 1 units, max: 200 units>
ise/admin(config)#username <username> password plain 1pNn ?
Possible completions:
 role
ise/admin(config)#username <username> password plain 1pNn role admin ?
Possible completions:
 disabled  User is diabled
 email  User email address
 <cr>

要关闭系统和系统电源，请在执行模式下使用 halt 命令。

此命令没有关键字和参数。

halt

示例

ise/admin# halt
ise/admin#

要显示思科 ISE 服务器的交互式帮助系统，请在执行模式下使用 help 命令。

此命令没有关键字和参数。

help

示例

ise/admin# help
Help may be requested at any point in a command by entering
a question mark '?'. If nothing matches, the help list will
be empty and you must backup until entering a '?' shows the
available options.
Two styles of help are provided:
1. Full help is available when you are ready to enter a
   command argument (e.g. 'show?') and describes each possible
   argument.
2. Partial help is provided when an abbreviated argument is entered
   and you want to know what arguments match the input
   (e.g. 'show pr?'.)
ise/admin#

要执行 esr 许可证操作，请在执行模式下使用 licence esr 命令。

license esr{ classic |smart }

Syntax Description

要在思科 ISE 服务器中创建新目录，请在执行模式下使用 mkdir 命令。

mkdir directory-name

Syntax Description

示例

ise/admin# mkdir disk:/test
ise/admin# dir
Directory of disk:/
       4096 May 06 2010 13:34:49 activemq-data/
       4096 May 06 2010 13:40:59 logs/
      16384 Mar 01 2010 16:07:27 lost+found/
       4096 May 06 2010 13:42:53 target/
       4096 May 07 2010 12:26:04 test/
Usage for disk: filesystem
                  181067776 bytes total used
                19084521472 bytes free
                20314165248 bytes available
ise/admin#

要在思科 ISE 服务器中查找远程系统的主机名，请在执行模式下使用 nslookup 命令。

nslookup {ip-address |hostname}

nslookup [ {ip-address |hostname} name-server {ip-address }]

nslookup [ {ip-address |hostname} querytype {query-type}]

Syntax Description

示例 1

ise/admin# nslookup 1.2.3.4
Trying "4.3.2.1.in-addr.arpa"
Received 127 bytes from 171.70.168.183#53 in 1 ms
Trying "4.3.2.1.in-addr.arpa"
Host 4.3.2.1.in-addr.arpa. not found: 3(NXDOMAIN)
Received 127 bytes from 171.70.168.183#53 in 1 ms
ise/admin#

示例 2

ise/admin# nslookup ipv6.google.com querytype AAAA
Server:         10.106.230.244
Address:        10.106.230.244#53
Non-authoritative answer:
ipv6.google.com canonical name = ipv6.l.google.com.
ipv6.l.google.com       has AAAA address 2404:6800:4007:803::1001
Authoritative answers can be found from:
google.com      nameserver = ns4.google.com.
google.com      nameserver = ns3.google.com.
google.com      nameserver = ns2.google.com.
google.com      nameserver = ns1.google.com.
ns1.google.com  internet address = 216.239.32.10
ns2.google.com  internet address = 216.239.34.10
ns3.google.com  internet address = 216.239.36.10
ns4.google.com  internet address = 216.239.38.10
ise/admin#

要更新 CLI 帐户密码，请在执行模式下使用 password 命令。

注

在 CLI 中进行安装时或完成安装后，当您为管理员创建密码时，请勿使用 $ 字符（除非是将其作为密码的最后一个字符）。如果在密码开头或中间使用此字符，系统虽然会接受该密码，但是您无法使用该密码登录到 CLI。 要更正此问题，请登录控制台并使用 CLI 命令，或者获取 ISE CD 或 ISO 文件。有关如何使用 ISO 重置密码的说明，可在以下文档中找到： https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/200568-ISE-Password-Recovery-Mechanisms.html

Syntax Description

示例

ise/admin# password
Enter old password:
Enter new password:
Confirm new password:
ise/admin#

尝试使用 patch install 命令安装补丁之前，必须阅读随附于补丁的发行说明中的补丁安装说明。发行说明包含重要的更新说明，您必须遵循这些说明。

要通过 CLI 在特定节点上安装应用的补丁包，请在执行模式下使用 patch install 命令。

patch install patch-bundle repository

注	在思科 ISE 分布式部署环境中，从管理员门户安装补丁包，以便补丁包自动安装在所有辅助节点上。

Syntax Description

如果您已在部署中启用主要管理节点 (PAN) 自动故障切换配置，请在安装补丁前将其禁用。对部署中的所有节点完成补丁安装后，启用 PAN 自动故障切换配置。

在版本 2.0 中安装补丁时，补丁安装进程不会提示您验证软件的散列值。从版本 2.0 开始，补丁安装软件会自动使用数字签名验证补丁软件的完整性。有关 patch install 命令的输出示例，请参阅下面提供的示例。

示例

ise/admin# patch install ise-patchbundle-2.0.0.306-Patch2-164765.SPA.x86_64.tar.gz disk
%Warning: Patch will be installed only on this node. Install using Primary Administration node GUI to install on all nodes in deployment. Continue? (yes/no) [yes] ?
Save the current ADE-OS running configuration? (yes/no) [yes] ?
Generating configuration...
Saved the ADE-OS running configuration to startup successfully
Initiating Application Patch installation...

Getting bundle to local machine...
Unbundling Application Package...
Verifying Application Signature...

Patch successfully installed
ise/admin#

尝试使用 patch remove 命令回滚补丁之前，必须阅读随附于补丁的发行说明中的补丁回滚说明。发行说明包含重要的更新说明，您必须遵循这些说明。

要删除应用的特定补丁包版本，请在执行模式下使用 patch remove 命令。

patch [ remove {application_name | version}]

注	在思科 ISE 分布式部署环境中，从管理员门户删除补丁包会自动从辅助节点中删除补丁。

Syntax Description

如果您已在部署中启用主要管理节点 (PAN) 自动故障切换配置，请在删除补丁前将其禁用。完成删除补丁后，您可以启用 PAN 自动故障切换配置。

示例 1

ise/admin# patch remove ise 3
Continue with application patch uninstall? [y/n] y
Application patch successfully uninstalled
ise/admin#

示例 2

ise/admin# patch remove ise 3
Continue with application patch uninstall? [y/n] y
% Patch is not installed
ise/admin#

要访问思科 ISE CLI 的根，请在执行模式下使用 permit rootaccess 命令。

permit rootaccess

注	必须作为 TAC 案例的一部分提交质询令牌请求才能获取质询响应。该 TAC 案例仅在 15 分钟内有效。如果您未在 15 分钟内收到质询响应，则必须再次提交。退出根级别访问权限后，质询/响应过程将锁定从 TAC 收到的根访问权限。

Syntax Description

示例

以下示例显示了如何访问思科 ISE CLI 的根：

ise/admin## 
ise/admin# permit rootaccess
1.  Generate Challenge Token Request
2.  Enter Challenge Response for Root Access
3.  Show History
4.  Exit
Enter CLI Option: 
1
Generating Challenge..................................... 
Challenge String (Please copy everything between the asterisk lines exclusively):
*****************************************************************************************
GLOX7gAAAQEBAAQAAAABAgAEAAAAAAMACLmJxgub0hitBAAQiUwv+XeD3pnJ4HLnJy30YQUABAAADhAGAANJU0UHAAZJU0VfQ1QIAANJU0UJACcJIDU2NGQ5NjgwLTFmZmEtOWI0ZS0wZjY1LTdlZDllMGQ1M2UzNQo=
*****************************************************************************************
Starting background timer of 15mins 
1.  Generate Challenge Token Request
2.  Enter Challenge Response for Root Access
3.  Show History
4.  Exit
Enter CLI Option: 
2
Please input the response when you are ready .........................
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
Response Signature Verified successfully ! 
Granting shell access
sh-4.2# ls
2.4backup                                 config          CT_Deme_Test_Rpm                ct_rolling.txt     lost+found              threadHeapDumpGntr.sh
backup_anc-2.7.0-115.jar                  corefiles       CT_engine-2.7.0-1.0.x86_64.rpm  err.out            prrt-server.log         tomcat-process-log.txt
backup_guestaccess-upgrade-2.7.0-115.jar  corestacks.txt  ct_persistent.txt               Heap_dump20190705  libciscosafec.so.4.0.1  Thread_dump_2019-07-05-19:07:30
sh-4.2# exit
exit
Root shell exited 
1.  Generate Challenge Token Request
2.  Enter Challenge Response for Root Access
3.  Show History
4.  Exit
Enter CLI Option: 
3
************************************ 
                SN No : 1 
************************************ 
Challenge 3/WcyAAAAQEBAAQAAAABAgAEAAAAAAMACMt89YhCTVWWBAAQwo9lyianfhO4C5u1+v80AQUABAAADhAGAANJU0UHAAZJU0VfQ1QIAANJU0UJACcJIDU2NGQ5NjgwLTFmZmEtOWI0ZS0wZjY1LTdlZDllMGQ1M2UzNQo=  generated at 2019-06-12 15:40:01.000
************************************ 
                SN No : 2 
************************************ 
Challenge exNwkAAAAQEBAAQAAAABAgAEAAAAAAMACCIBbk3qhsFGBAAQQ4UKV7KrKQ7uoHEq7qPG1AUABAAADhAGAANJU0UHAAZJU0VfQ1QIAANJU0UJACcJIDU2NGQ5NjgwLTFmZmEtOWI0ZS0wZjY1LTdlZDllMGQ1M2UzNQo=  generated at 2019-06-12 15:43:31.000
1.  Generate Challenge Token Request
2.  Enter Challenge Response for Root Access
3.  Show History
4.  Exit
Enter CLI Option: 
4
Exiting.............. 
ise/admin#

要诊断远程系统的基本 IPv4 网络连接，请在执行模式下使用 ping 命令。

ping {ip-address | hostname} [ df df] [ packetsize packetsize] [ pingcount pingcount]

Syntax Description

示例

ise/admin# ping 172.16.0.1 df 2 packetsize 10 pingcount 2
PING 172.16.0.1 (172.16.0.1) 10(38) bytes of data.
18 bytes from 172.16.0.1: icmp_seq=0 ttl=40 time=306 ms
18 bytes from 172.16.0.1: icmp_seq=1 ttl=40 time=300 ms
--- 172.16.0.1 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 300.302/303.557/306.812/3.255 ms, pipe 2
ise/admin#

要诊断远程系统的基本 IPv6 网络连接，请在执行模式下使用 ping6 命令。这类似于 IPv4 ping 命令。

ping6 {ip-address} [GigabitEthernet {0-3}][packetsize {packetsize}] [pingcount {pingcount}]

Syntax Description

示例 1

ise/admin# ping6 3ffe:302:11:2:20c:29ff:feaf:da05
PING 3ffe:302:11:2:20c:29ff:feaf:da05(3ffe:302:11:2:20c:29ff:feaf:da05) from 3ffe:302:11:2:20c:29ff:feaf:da05 eth0: 56 data bytes
64 bytes from 3ffe:302:11:2:20c:29ff:feaf:da05: icmp_seq=0 ttl=64 time=0.599 ms
64 bytes from 3ffe:302:11:2:20c:29ff:feaf:da05: icmp_seq=1 ttl=64 time=0.150 ms
64 bytes from 3ffe:302:11:2:20c:29ff:feaf:da05: icmp_seq=2 ttl=64 time=0.070 ms
64 bytes from 3ffe:302:11:2:20c:29ff:feaf:da05: icmp_seq=3 ttl=64 time=0.065 ms
--- 3ffe:302:11:2:20c:29ff:feaf:da05 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3118ms
rat min./aft/max/endive = 0.065/0.221/0.599/0.220 ms, pipe 2
ise/admin#

示例 2

ise/admin# ping6 3ffe:302:11:2:20c:29ff:feaf:da05 GigabitEthernet 0 packetsize 10 pingcount 2
PING 3ffe:302:11:2:20c:29ff:feaf:da05(3ffe:302:11:2:20c:29ff:feaf:da05) from 3ffe:302:11:2:20c:29ff:feaf:da05 eth0: 10 data bytes
18 bytes from 3ffe:302:11:2:20c:29ff:feaf:da05: icmp_seq=0 ttl=64 time=0.073 ms
18 bytes from 3ffe:302:11:2:20c:29ff:feaf:da05: icmp_seq=1 ttl=64 time=0.073 ms
--- 3ffe:302:11:2:20c:29ff:feaf:da05 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1040ms
rat min./aft/max/endive = 0.073/0.073/0.073/0.000 ms, pipe 2
ise/admin#

此命令没有关键字和参数。要重新引导思科 ISE 操作系统，请在执行模式下使用 reload 命令。

reload

示例 1

ise/admin# reload
Do you want to save the current configuration? (yes/no) [yes]? yes
Generating configuration...
Saved the running configuration to startup successfully
Continue with reboot? [y/n] y
Broadcast message from root (pts/0) (Fri Aug 7 13:26:46 2010):
The system is going down for reboot NOW!
ise/admin#

示例 2

ise/iseadmin#reload cli
%WARNING: : The Cisco ISE CLI will restart now and will be unavailable for a few minutes. 
 Do you want to continue (yes/no) [no] ?yes
Connection to ise closed.

要重置 ADE-OS 网络配置（例如 IP 地址/掩码/网关、主机名、域名、DNS 服务器和 NTP 服务），请在执行模式下使用 reset-config 命令。这些参数基本上与安装过程中提示的参数相同。在使用此 CLI 命令时，系统不会提示管理员输入管理员密码。此命令不会重置当前 ISE 配置或操作数据，因为这些任务是使用 application reset-config 命令实现的。

reset-config

要恢复系统之前的备份，请在执行模式下使用 restore 命令。恢复操作会恢复与思科 ISE 和思科 ADE OS 相关的数据。

使用以下命令可恢复与思科 ISE 应用和思科 ADE OS 相关的数据：

restore [{filename} repository {repository-name} encryption-key hash | plain {encryption-key-name}]

restore [{filename} repository {repository-name} encryption-key hash | plain {encryption-key-name} include-adeos]

Syntax Description

如果您已在部署中启用主要管理节点 (PAN) 自动故障切换配置，请在恢复备份前将其禁用。在恢复完成后，您可以启用 PAN 自动故障切换配置。

要删除现有目录，请在执行模式下使用 rmdir 命令。

rmdir directory-name

Syntax Description

示例

ise/admin# mkdir disk:/test
ise/admin# dir
Directory of disk:/
       4096 May 06 2010 13:34:49 activemq-data/
       4096 May 06 2010 13:40:59 logs/
      16384 Mar 01 2010 16:07:27 lost+found/
       4096 May 06 2010 13:42:53 target/
       4096 May 07 2010 12:26:04 test/
Usage for disk: filesystem
                  181067776 bytes total used
                19084521472 bytes free
                20314165248 bytes available
ise/admin#
ise/admin# rmdir disk:/test
ise/admin# dir
Directory of disk:/
4096 May 06 2010 13:34:49 activemq-data/
       4096 May 06 2010 13:40:59 logs/
      16384 Mar 01 2010 16:07:27 lost+found/
       4096 May 06 2010 13:42:53 target/
Usage for disk: filesystem
                  181063680 bytes total used
                19084525568 bytes free
                20314165248 bytes available
ise/admin#

要启动与远程系统的加密会话，请在执行模式下使用 ssh 命令。

注	管理员或用户可以使用此命令

ssh [{ip-address | hostname}] [username] [ port {port number | version {1 | 2}]

ssh delete host {ip-address | hostname}

Syntax Description

示例 1

ise/admin# ssh 172.79.21.96 admin port 22 version 2
ssh: connect to host 172.79.21.96 port 22: No route to host
ise/admin#

示例 2

ise/admin# ssh delete host ise
ise/admin#

要转储所选网络接口上的流量，请在执行模式下使用 tech 命令。

Syntax Description

示例 1

ise/admin# tech dumptcp 0 count 2
Invoking tcpdump. Press Control-C to interrupt.
tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
2 packets captured
2 packets received by filter
0 packets dropped by kernel
02:38:14.869291 IP (tos 0x0, ttl 110, id 4793, offset 0, flags [DF], proto: TCP (6), length: 40) 10.77.202.52.1598 > 172.21.79.91.22: ., cksum 0xe105 (correct),
 234903779:234903779(0) ack 664498841 win 63344
02:38:14.869324 IP (tos 0x0, ttl  64, id 19495, offset 0, flags [DF], proto: TCP (6), length: 200) 172.21.79.91.22 > 10.77.202.52.1598: P 49:209(160) ack 0 win
12096
ise/admin#

示例 2

ise/admin# tech iostat
Linux 2.6.18-348.el5 (ise)         02/25/13
avg-cpu:  %user   %nice %system %iowait  %steal   %idle
           7.26    0.73    4.27    0.77    0.00   86.97
Device:            tps   Blk_read/s   Blk_wrtn/s   Blk_read   Blk_wrtn
sda              16.05       415.47      1802.16    3761049   16314264
sda1              0.01         0.23         0.00       2053         22
sda2              0.02         0.22         0.04       1982        354
sda3              0.01         0.29         0.02       2626        152
sda4              0.00         0.00         0.00         14          0
sda5              0.00         0.16         0.00       1479          0
sda6              0.49         0.24         7.45       2189      67400
sda7             15.51       414.27      1794.66    3750186   16246336
ise/admin#

示例 3

ise/admin# tech mpstat
Linux 2.6.18-348.el5 (ise)         02/25/13
02:41:25     CPU   %user   %nice    %sys %iowait    %irq   %soft  %steal   %idle    intr/s
02:41:25     all    7.07    0.70    3.98    0.74    0.02    0.14    0.00   87.34   1015.49
ise/admin#

要设置当前终端屏幕上的当前会话的行数，请在执行模式下使用 terminal length 命令。

terminal length 整数

Syntax Description

示例

ise/admin# terminal length 24
ise/admin#

要设置所有会话的非活动超时，请在执行模式下使用 terminal session-timeout 命令。

terminal session-timeout 分钟

Syntax Description

示例

ise/admin# terminal session-timeout 40
ise/admin#

要在系统上为所有登录系统的用户设置欢迎消息，请在执行模式下使用 terminal session-welcome 命令。

terminal session-welcome 字符串

Syntax Description

示例

ise/admin# terminal session-welcome Welcome
ise/admin#

要指定连接到当前会话的当前行的终端类型，请在执行模式下使用 terminal terminal-type 命令。

terminal terminal-type

Syntax Description

示例

ise/admin# terminal terminal-type vt220
ise/admin#

要发现数据包在前往其目的地址时选择的路由，请在执行模式下使用 traceroute 命令。

traceroute [ip-address | hostname]

Syntax Description

示例

ise/admin# traceroute 172.16.0.11
traceroute to 172.16.0.11 (172.16.0.11), 30 hops max, 38 byte packets
 1 172.16.0.11 0.067 ms 0.036 ms 0.032 ms
ise/admin#

要禁用调试功能，请在执行模式下使用 undebug 命令。

undebug [ all | application | backup-restore | cdp | config | copy | icmp | locks | logging | snmp | system | transfer | user | utils]

Syntax Description

示例

ise/admin# undebug all
ise/admin#

要显示管理 CLI 中可用命令的内容，请在执行模式下使用 which 命令。

which

Syntax Description

Command History

示例

以下示例显示了 which 的输出：

ise/admin# which
[     1].  application  configure<STRING>
[     2].  application  install<STRING><STRING>
[     3].  application  remove<STRING>
[     4].  application  reset-config<STRING>
[     5].  application  reset-passwd<STRING><STRING>
[     6].  application  start<STRING>
[     7].  application  start<STRING>  safe
[     8].  application  stop<STRING>
[     9].  application  upgrade  cleanup
[    10].  application  upgrade  prepare<STRING><STRING>

要复制、显示或擦除思科 ISE 服务器配置，请在执行模式下使用带相应参数的 write 命令。

write [ erase | memory | terminal ]

Syntax Description

示例 1

ise/admin# write memory
Generating configuration...
ise/admin#

示例 2

ise/admin# write terminal
Generating configuration...
!
hostname ise