topic Leroy, in Network Access Control

ISE Upgrade Path

Leroy Plock — Mon, 11 Mar 2019 06:12:16 GMT

Greetings,

Got some other projects out of the way so finally getting back to our ISE deployment which is getting behind.

We are on 1.2.1 Patch 2. We want to get to 2.x of course, but that's very new, we'll let it bake for a while.

Looking at the downloads page, it apppears we will have to go to 1.3 or 1.4 on our way to 2.x.

So I'm thinking we will upgrade to 1.4 and run that for a few months before going to 2.x.

Question: Does this make sense?

Question: Is there any reason to apply the latest patch (8) for 1.2 before the 1.4 upgrade, or should I just go straight to 1.4?

Thank you.

Tim Steele — Fri, 30 Oct 2015 19:43:51 GMT

Leroy,

You'll want to get to patch 5 at least before upgrading. Take a look at the ISE 1.4 upgrade guide:

Tim

Leroy Plock — Fri, 30 Oct 2015 19:50:02 GMT

Doh! Well that settles that. As long as I'm patching I'll go to 8. Thanks.

Tim Steele — Fri, 30 Oct 2015 20:28:25 GMT

No worries, glad to help!

Tim

Leroy Plock — Mon, 09 Nov 2015 21:50:56 GMT

So the 1.2.1 Patch 8 install was no problem.

Now I'm prepping for the 1.2.1 to 1.4 upgrade.

The upgrade guide describes a 2 node scenario and a Distributed scenario. Our deployment falls in between:

Node A: Primary Admin, Secondary MnT
Node B: Primary MnT, Secondary Admin
Node C: Policy Services Node only
Node 😧 Policy Services Node only

Extrapolating from the 2 scenarios, I think my upgrade order will be:
1st: Node B
2nd: Node C
3rd: Node D
Last: Node A

Does that sound right?

Tim Steele — Wed, 11 Nov 2015 18:57:54 GMT

Yep, looks good. Be sure to grab a successful backup before you start. 🙂

Also, be sure to review the post-upgrade tasks in the 1.4 upgrade guide.

Leroy Plock — Wed, 11 Nov 2015 19:05:10 GMT

Fer sure. We're running it in the lab first...