topic ISE Upgrade from 2.2 to 2.7 in Network Access Control

ISE Upgrade from 2.2 to 2.7

AirBorn — Thu, 27 May 2021 10:39:39 GMT

Hi,

I have a deployment consisting of 2PAN, 1MNT and 10 PSN running release 2.2, we plan to upgrade to 2.7 release. I have the following questions.

1/ Is it possible to upgrade PANs an MNT first and delay PSNs upgrade, meaning having PANs & MNT running 2.7 and PSNs running 2.2 for some days ?

2/ Is it advisable to upgrade PSNs remotely ?

Regards

Re: ISE Upgrade from 2.2 to 2.7

balaji.bandi — Thu, 27 May 2021 10:45:52 GMT

Look at this thread may help you :

https://community.cisco.com/t5/network-access-control/ise-2-2-to-2-7-is-it-worth-it/m-p/4147334

Re: ISE Upgrade from 2.2 to 2.7

AirBorn — Thu, 27 May 2021 10:50:08 GMT

Unfortunately I didn't found any answer for my questions there

Regards

Re: ISE Upgrade from 2.2 to 2.7

balaji.bandi — Thu, 27 May 2021 10:59:46 GMT

I may have missed other URL here.

the URL in the past post mentioned to know and aware when you migrating from 2.2 to 2.7

the URL missed was below : (Upgrade Method)

https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/upgrade_guide/Upgrade_Journey/HTML/b_upgrade_method_2_7.html

is this make sense ?

Re: ISE Upgrade from 2.2 to 2.7

lrojaslo — Thu, 27 May 2021 14:24:10 GMT

For your questions:

1- You need to have minimum 1 Admin and 1 MNT always in your deployment, as soon as you move from 2.2 to 2.7 the ISE node will leave the current deployment and build a new separate deployment on the new version. Basically, you cannot have a mixed version deployment.

2- If you have good connectivity/bandwidth shouldn't be a problem.