CiscoSE/aci_ise_portal - Cisco Code Exchange

ACI and ISE Portal

This tool automates the configuration necessary to support device authentication using 802.1x and RADIUS with ACI and ISE.

HTML user interface works better in Chrome and Firefox

Contacts:

Cesar Obediente ( cobedien@cisco.com )
Santiago Flores ( sfloresk@cisco.com )
Jason Mah ( jamah@cisco.com )

Container Installation

docker run -p 8080:8080 jasmah/aciiseportal

go to http://0.0.0.0:8080

Source Installation

As this is a Django application you will need to either integrate the application in your production environment or you can launch the application in a virtual environment on your computer/server. In this distribution there is a requirements.txt file that you can use to obtain the package requirements that are needed. The requirements file is located in the root directory of this distribution.

It might make sense for you to create a Python Virtual Environment before installing the requirements file. For information on utilizing a virtual environment please read http://docs.python-guide.org/en/latest/dev/virtualenvs/. Once you have a virtual environment active then install the packages in the requirements file.

(virtualenv) % pip install -r requirements.txt

To run the the application, execute the following in the root directory of the distribution:

python manage.py makemigrations

python manage.py migrate

python manage.py runserver 0.0.0.0:YOUR_PORT

Demo

https://youtu.be/mYoW2EJfTco

Use Case

This web application facilitates policy orchestration between Cisco ACI and ISE. The application addresses the needs of a customer that was seeking a solution to automate onboarding a device on ACI and authenticating it on ISE's policy engine, and ensures that policies are consistently applied across all devices. The application is written in Python and uses the Django web framework.

Cisco ACI delivers an intent-based networking framework to enable policy management and automation in the data center. ACI policies capture higher-level business and user intent so that the tool translates needs into network constructs that dynamically provision the network, security, and infrastructure services.

Objectives

Ensure policies managed with ACI match to the identity management solution in the environment, in this case Cisco Identity Services Engine (ISE).
Integrate authentication tied to ACI policies with the Cisco ISE solution.

Demo

This tool automates the configuration that is required to support device authentication using 802.1x and RADIUS with ACI and ISE. The HTML user interface works best in Chrome and Firefox.

Since this is a Django application, you will need to either integrate the application in your production environment or launch the application in a virtual environment on your computer/server. In this distribution, there is a requirements.txt file that you can use to obtain the package requirements that are needed. The requirements file is located in the root directory of this distribution.

Learning Labs

Introduction to ACI Programmability