topic Changing ISE IP Address in Integrated Security Platform

Changing ISE IP Address

robad — Sun, 10 Oct 2021 11:12:35 GMT

Hi Guys,

We have an old active ISE, and a new ISE that is configured but not yet in use.

We want to make the new ISE as active, and get-rid of the old one.

For that, We want to change the new ISE IP to be the same as the old one, and then, all the devices will start work against the new one. [Of course that before it, we'll take-off the old ISE's NIC]

When trying to change the new ISE IP via CLI, I got some error. can't remember now what it was, and can't check it again right now.

Is there any way to change the ISE's IP ? Is it supported ?

Thanks in advance

Re: Changing ISE IP Address

balaji.bandi — Sun, 10 Oct 2021 11:39:08 GMT

Hope it is a Standalone Deployment? Take Maintenance window, shutdown OLD ISE from the network. any ARP on the switch clears the ARP. ( since it has OLD ISE ARP registered) - if you have Long ARP clear, this has an issue.

Ping the OLD ISE IP make sure it's off and not able to ping.

connect to Console of the ISE follow below instruction. ( make sure you also clear ARP's new ISE MAC address from the switch).

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/install_guide/b_ise_InstallationGuide24/b_ise_InstallationGuide24_chapter_0101.html#ID-1412-00000138

Re: Changing ISE IP Address

robad — Sun, 10 Oct 2021 11:50:55 GMT

Hi Balaji,

Thanks for the info, I'll check and inform if it was successful.

BTW -

Here I can see that the services need/better be down.

Is it true ?

https://community.cisco.com/t5/network-access-control/acs-changing-ip-address/m-p/2144950

Re: Changing ISE IP Address

balaji.bandi — Sun, 10 Oct 2021 14:24:27 GMT

Not sure that is more focused on ACS ( that too 4.2 version 8 years or more back), not ISE.

Personally, I did what i have mentioned in My Lab most of the time it work.

Re: Changing ISE IP Address

robad — Sun, 17 Oct 2021 09:13:03 GMT

Working fine

Thanks !