topic Cisco ISE NTP problem in Network Access Control

Cisco ISE NTP problem

ciscodevi — Mon, 11 Mar 2019 06:59:20 GMT

Hi, Experts i synched ISE with NTP Server using UTC timezone. ISE was synched working fine joined AC and LDAP. but when i am restarting ISE (Poweroff/on) i am facing weired issue. demanding for root linux password which did't asked during ISE installation. i am adding error image and putting in text.

***An error occured during the file system check.

***Dropping you to a shell:; the system will reboot

give root password for maintenance

(or type Control-D to continue):

help would be appreciated

Your image or VM is corrupted

Marvin Rhoads — Wed, 10 Aug 2016 15:38:08 GMT

Your image or VM is corrupted.

You will need to either re-image and restore from backup (if you have one) or else open a TAC case to recover.

Hi Marvin

ciscodevi — Sat, 28 Jan 2017 09:45:02 GMT

Hi Marvin

Image was built in server, When i started server Image directly bootup to the setup so installed and run. rather the case is above.

If it is a hardware appliance

Marvin Rhoads — Sun, 29 Jan 2017 03:37:45 GMT

If it is a hardware appliance then you should use the procedure to recover using the iso image.

There was't any backup file

ciscodevi — Mon, 30 Jan 2017 10:13:58 GMT

There was't any backup file or disk/USB. I download ISE 1.4, 1.5 and 2.0 but they thos IOSs were not compatible with that hardware "SNS-3415".

i was able to do on ESXi but i dont want this.

ISE 1.4 and higher is

Marvin Rhoads — Mon, 30 Jan 2017 13:44:39 GMT

ISE 1.4 and higher is compatible with the SNS-3415 appliance.

Reference: http://www.cisco.com/c/en/us/td/docs/security/ise/1-4/installation_guide/b_ise_InstallationGuide14/b_ise_InstallationGuide14_chapter_010.html

For instance, the file "ise-1.4.0.253.x86_64.iso" is titled ""Cisco ISE Software Version 1.4.0 full installation(no IPN functionality).This ISO file can be used for installing ISE on ISE-33x5, NAC-33x5 Appliances, and SNS-34x5 Servers as well as a VM installation on VMWare ESX/ESXi 5.x ".

The SNS-3415 can be recovered via mounting the IOS when using the CIMC port:

http://www.cisco.com/c/en/us/td/docs/security/ise/1-4/installation_guide/b_ise_InstallationGuide14/b_ise_InstallationGuide14_chapter_011.html#ID-1415-00000153

Thank You Marvin . i tried it

ciscodevi — Tue, 31 Jan 2017 04:09:46 GMT

Thank You Marvin . i tried it 5 month ago but now i will this try this speific file.

yes the links you mentioned above there is Caution

"Changing the time zone on a Cisco ISE appliance after installation causes the Cisco ISE application on that node to be unusable. " that i did 😞

One more thing which i may to know 1.4 is also compatible with SNS3515? if i am forgetting the model because its on client side.

Will update you shortly about the activity.

The 3500 series appliances

Marvin Rhoads — Tue, 31 Jan 2017 12:33:30 GMT

The 3500 series appliances (3515 and 3595) require ISE 2.0.1 or later. That release introduced support for the secure boot (UEFI) that these appliances require.

Reference: http://www.cisco.com/c/en/us/td/docs/security/ise/2-0-1/install_guide/b_ise_InstallationGuide201/b_ise_InstallationGuide201_chapter_01.html#id_11131