topic Re: Do we support different patch levels in the same major version? in Network Access Control

Do we support different patch levels in the same major version?

bricrock — Tue, 18 Jul 2017 16:16:35 GMT

I think the answer is "no" but I'm being asked if we support different patch levels (p1 vs p3) for ISE nodes within the same major version (e.g. 2.1)?

Please advise. Thank you,

Brian

Re: Do we support different patch levels in the same major version?

Oliver Laue — Tue, 18 Jul 2017 16:47:52 GMT

No. If you try to join a node with a different patch level the System states they need to be on the same version. If you install a patch in an existing deployment all nodes will receive the patch after a couple of time.

Re: Do we support different patch levels in the same major version?

Arne Bier — Tue, 18 Jul 2017 23:07:30 GMT

Do you know how long it should until the newly registered nodes "automatically" receive the patch to bring it in line with the others? In my experience with ISE 2.2p1 I didn't see this automatic behaviour at all. I eventually just kicked off another patching session via the GUI - ISE was clever enough to only patch the two new PSN's that I had registered.

Re: Do we support different patch levels in the same major version?

Oliver Laue — Tue, 18 Jul 2017 23:49:46 GMT

a fresh joined node will not receive a patch which was already deployed. if you try to register an ise 2.2p0 node to a ise 2.2p1 deployment the system states you have to update the new node to the patch level of the existing deployment.

if you deploy a patch to a deployment normally the automatic install order should be PAN, (S)PAN, MNT, (S)MNT, PSNs