topic Re: Migrate 2 node ISE 2.6 to 3.1 (migrate to new platform) in Network Access Control

Migrate 2 node ISE 2.6 to 3.1 (migrate to new platform)

Gomez — Wed, 20 Jul 2022 14:55:41 GMT

Hi,

I have the following situation currently running a 2 node ISE cluster version 2.6. The hardware needs to be replaced by virtual appliance and would like to upgrade to version 3.1 in the mean time. I would also like to maintain current IP's.

What is the recommanded procedure for this?

1. Setup a new ISE 2 node cluster on vmware running version 3.1.

2. Restore backup configuration from current production ISE 2.6 onto the new 2 node cluster.

3. On day of cutover shutdown ISE 2.6 appliances, change's IP of new 3.1 cluster to old IP's of 2.6. (reset-config procedure)

Re: Migrate 2 node ISE 2.6 to 3.1 (migrate to new platform)

ahollifield — Wed, 20 Jul 2022 15:01:20 GMT

That procedure sounds good to me.

https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/upgrade_guide/HTML/b_upgrade_method_3_1.html#id_125062

Just make sure you have certificates, hostnames, DNS records, AD join all squared away during the migration.

Re: Migrate 2 node ISE 2.6 to 3.1 (migrate to new platform)

ahollifield — Wed, 20 Jul 2022 15:02:23 GMT

Also of course licensing Base/Plus/Apex to Essentials/Advantage/Premier.

Re: Migrate 2 node ISE 2.6 to 3.1 (migrate to new platform)

ashish.kushwaha — Thu, 21 Jul 2022 02:21:18 GMT

you are refer the below article. they are explained with screenshot.

https://www.lookingpoint.com/blog/cisco-ise-3.0-major-upgrade