It may seem obvious to many, but one of the very first things
that we have to have, if we're going to do authentication
to verify who somebody is, is have that person's record,
that information somewhere.
Now, that can be stored in ISE as a local entity,
or a local identity, or you can have
that information on Active Directory
and pull the information from there.
This is the home and summary page for the Identity Services
Engine.
And if we want to take a look at the local user
database, or the local identities
that we can see or hear, one way of getting there WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
that we can see or hear, one way of getting there
is to hover over Work Centers.
And they've organized things for us here, which is great.
And if we go down to Network Access,
and from the dropdown we could go to Identities,
if we look at the breadcrumbs, it
will be Work Centers, and then Network Access,
and then Identities.
And here we can locally store on this identity services engine,
we could store information about endpoints
like computers and store information about users.
If we wanted to create a new local user on ISE,
we could click on Network Access Users.
And I have a user here called Bob that I was practicing with. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And I have a user here called Bob that I was practicing with.
Go ahead and just put a check there.
We'll get rid of Bob.
And that way we can demonstrate how to create a new local user,
if that's what we plan to do.
So we can click on Add, and we'll put in local sample user.
And then we'll specify a password,
and we'll confirm the password.
And then we'll scroll down and click on Submit.
Now, it doesn't make a lot of sense
to do all of our management with local users,
because if we have thousands of users
we're going to want to tie into something much bigger
like Active Directory.
To train ISE that it should work with an external server WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
To train ISE that it should work with an external server
like Active Directory, we'd go to External ID Sources.
And here we have LDAP, and ODBC, and other options
under Active Directory.
Right here, we can go ahead and click on Add
and put the details about joining this identity services
engine [INAUDIBLE] domain.
And if we continue to integrate ISE with Active Directory,
at some point it's going to ask, hey,
what is the username that you can
use that has the authority or the rights
to add this ISE device into Active Directory?
Now, not only can we look up user names in Active Directory WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Now, not only can we look up user names in Active Directory
and use those and validate those user
accounts, but we can also use group membership
in Active Directory.
It gives us a central point of management for our group
memberships and our users that we can then
leverage by having ISE dip into that and do those queries.
So in the very next video, here's what we'll do--
we'll walk through from soup to dessert
the integration of an identity services engine
with Active Directory.
And we'll extract information just
to verify that it's working.
So, I'll see you in the next video for exactly that.
Meanwhile, I hope this has been informative for you, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Meanwhile, I hope this has been informative for you,
and I'd like to thank you for viewing.