Replacing ISE 2.3 deployment with 2.7 deployment

M. Wisely — Mon, 15 Nov 2021 15:21:26 GMT

Hi All

We currently have a two node deployment running 2.3 on SNS-34XX appliances, we're moving to virtual appliances running 2.7.

My plan is as follows:

1. Setup one VM with a temporary address and restore a config backup to it (completed)

2. Do some testing (evaluation licenses)

3. Shut down one of the physical appliances and stop the services on the VM, change VM address to match physical appliance one , start the services

4. Do some testing (evaluation licenses)

5. Shut down the other physical appliance and setup the second VM with it's address and register it to the primary

6. Re-host licenses to new deployment

Currently we're using around 5k base licenses which will obviously exceed the 100 eval license count but since there's no enforcement I'm assuming that won't be an issue.

Does this make sense?

Thanks

Re: Replacing ISE 2.3 deployment with 2.7 deployment

balaji.bandi — Mon, 15 Nov 2021 16:05:57 GMT

High level Technically your plan should work as expected, you will see any issue on first VM Migration, that will be learning lessons and any major you can open a TAC case ( i see easy approach 1 at time, Less risk).

topic Replacing ISE 2.3 deployment with 2.7 deployment in Network Access Control

Replacing ISE 2.3 deployment with 2.7 deployment

Re: Replacing ISE 2.3 deployment with 2.7 deployment