topic ISE - Running URT on a primary single node, is it safe? in Network Access Control

ISE - Running URT on a primary single node, is it safe?

TedB123 — Tue, 27 Jun 2023 10:46:34 GMT

im preparing to upgrade our single ISE node from v2.6 -> 2.7 then to 3.2

ive come across the URT tool but theres a couple of warnings in the guide and id like to confirm if its safe to run this tool

The warnings are
Do not run the URT on the Primary Policy Administration Node. The URT tool does not simulate MnT operational data upgrades.
In multiple-node deployments, do not run the URT on the Primary Policy Administration Node.

Our current node is no longer in a multi-node deployment but does have the Administration, Monitoring and Policy Service Personas associated with it.

can anybody advise if i can run URT on our Primary node even though it has those roles/personas associated with it?

cheers

Re: ISE - Running URT on a primary single node, is it safe?

Ambuj M — Tue, 27 Jun 2023 11:25:55 GMT

yes you can, the message is for deployment with multiple nodes environment. i have standalone node with 3 personas in my test lab and i use upgrade readiness tool before upgrade.

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215528-upgrade-identity-services-engine-ise.html

Re: ISE - Running URT on a primary single node, is it safe?

TedB123 — Tue, 27 Jun 2023 11:30:27 GMT

@Ambuj M wrote:
yes you can, the message is for deployment with multiple nodes environment. i have standalone node with 3 personas in my test lab and i use upgrade readiness tool before upgrade.
https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215528-upgrade-identity-services-engine-ise.html

ok thanks for the info.. good to know

Re: ISE - Running URT on a primary single node, is it safe?

Aref Alsouqi — Tue, 27 Jun 2023 11:37:51 GMT

I agree with @Ambuj M , you can safely run the URT tool on a standalone node as in your case.

Re: ISE - Running URT on a primary single node, is it safe?

TedB123 — Tue, 27 Jun 2023 11:42:35 GMT

1 thing to note... even though our node is essentially standalone its role says Primary
Make Standalone is the option next to it...

does this make a difference? Is our node still considered as "standalone" even though it says Primary?

Re: ISE - Running URT on a primary single node, is it safe?

Aref Alsouqi — Tue, 27 Jun 2023 11:55:22 GMT

I think it should be converted to a standalone node.

Re: ISE - Running URT on a primary single node, is it safe?

TedB123 — Tue, 27 Jun 2023 12:03:10 GMT

@Aref Alsouqi wrote:
I think it should be converted to a standalone node.

its never simple is it

And what is the implication of converting the node to standalone? does it reboot? do you know what changes?

Re: ISE - Running URT on a primary single node, is it safe?

Aref Alsouqi — Tue, 27 Jun 2023 12:34:16 GMT

If that node going to be on its own then it should be converted to a standalone node. I can't remember if that will reboot the whole node or just ISE applications.

Re: ISE - Running URT on a primary single node, is it safe?

TedB123 — Tue, 27 Jun 2023 13:39:41 GMT

@Aref Alsouqi wrote:
If that node going to be on its own then it should be converted to a standalone node. I can't remember if that will reboot the whole node or just ISE applications.

ok thanks... ill need to get clarification about this from tac support.

Re: ISE - Running URT on a primary single node, is it safe?

Aref Alsouqi — Tue, 27 Jun 2023 14:29:18 GMT

I checked my notes, it shouldn't restart the whole node, but it will restart ISE applications, so you should expect some downtime when you do this.

Re: ISE - Running URT on a primary single node, is it safe?

TedB123 — Tue, 27 Jun 2023 14:32:49 GMT

@Aref Alsouqi wrote:
I checked my notes, it shouldn't restart the whole node, but it will restart ISE applications, so you should expect some downtime when you do this.

ok thanks for checking and letting me know

cheers