topic Re: ISE CLI Login Loop after 3.3 upgrade in Network Access Control

ISE CLI Login Loop after 3.3 upgrade

Anand Narayana — Mon, 08 Jul 2024 12:52:30 GMT

Recently I upgraded ISE VM from 3.2 patch4 to 3.3. After the upgrade, I was unable to access both CLI and GUI. GUI it does not open where as the CLI, soon after I enter the login credentials, it accepts and prompt again for the login. Multiple reboots no luck. it just loops whether I try directly from the VM console or from SSH. Tried searching in the forum and few suggested to check such issues can cause if is snapshot running but nothing. This ISE is a standalone.I do not see any issues to the Cisco switches as they are able to successfully authenticate using the ISE just that I am not able to login to ISE using admin credentials.

Any help would be appreciated.

Re: ISE CLI Login Loop after 3.3 upgrade

Mark Elsen — Mon, 08 Jul 2024 15:29:02 GMT

- How do you define this login loop exactly ? Do you get an authentication error when trying to logon ,
if not what happens then ?
+ What in browser term means : GUI it does not open , what do you see in the browser (or post a screenshot of it)
- When rebooting the VM could scrutinize the boot process too and check if any errors are reported during boot up ->?
- What could have happened is that the VM needs more resources, therefore when the ISE has booted , use
the hypervisor and check the current CPU and Memory being used. If needed increase those parameters

Re: ISE CLI Login Loop after 3.3 upgrade

Anand Narayana — Tue, 09 Jul 2024 06:45:34 GMT

Login Loop, I have attached the screen shot. I enter the login credentials (Login.jpg), it accepts and then prompts me to login again (Post_login.jpg). There is no authentication error message. I have attached a sample authentication error message (Authentication_Error_Sample.jpg) as a reference that is not reflecting in the other 2 screens that attached.

GUI - From the web browser https://192.168.1.1 (ISE IP), it does not open. Message page cannot be displayed.

No errors during the boot process as it directly takes me the login prompt without any boot progress when powering on the VM or rebooting using the Guest OS reboot option

RAM Increased to 32 GB still no luck

Re: ISE CLI Login Loop after 3.3 upgrade

Mark Elsen — Tue, 09 Jul 2024 06:56:38 GMT

>...RAM Increased to 32 GB still no luck
- How does that compare to the actually memory used when the ISE-VM is booted (using the monitoring tools
from the hypervisor) ?

- For the rest , there is not much I can do or say ; I hope there was an application backup for instance from the ISE 3.2
node (which should always have been done).
Then one could restore this on a test-ise3.2 VM and try upgrading again (e.g.). Or even restore on a virgin 3.3 , which I think is
supported.

- If all of that is not possible , contact Cisco TAC ,

Re: ISE CLI Login Loop after 3.3 upgrade

Mark Elsen — Tue, 09 Jul 2024 07:39:06 GMT

- Added on 7/9 : another possibility is that one of the disk partitions is full , yet I don't know of any
methods to check that with the hypervisor (only)

Re: ISE CLI Login Loop after 3.3 upgrade

Mark Elsen — Tue, 09 Jul 2024 07:41:07 GMT

- FYI : https://community.cisco.com/t5/network-access-control/can-backup-from-ise-3-2-and-restore-to-ise-3-3/m-p/5140428#M590416

Re: ISE CLI Login Loop after 3.3 upgrade

check_ewan — Thu, 01 May 2025 11:51:01 GMT

Hello,

Did you ever find a solution to your issue?

Facing exactly same problem after upgrade from version 3.2 patch 4 to version 3.3 patch 4

Re: ISE CLI Login Loop after 3.3 upgrade

Marcelo Morais — Sat, 03 May 2025 16:16:12 GMT

Hi @check_ewan ,

please take a look at: CSCwi33361 ISE CLI access problems: Failed to connect to server.

Hope this helps !!!

Re: ISE CLI Login Loop after 3.3 upgrade

check_ewan — Mon, 05 May 2025 06:52:50 GMT

Already read through CSCw133361. It's not same issue as what we're experiencing. In my case, GUI is not accessible. CLI login screen keeps coming up after correct login credentials are entered....like in a loop.

Re: ISE CLI Login Loop after 3.3 upgrade

Marcelo Morais — Tue, 06 May 2025 00:39:47 GMT

@check_ewan ,

got it !!!

To avoid weird stuffs ... I always preferred to:

install ISE from scratch (ISE 3.3), update the Patch (P4) and Restore de backup (ISE 3.2 P4 backup)

Update ISE to latest release (ISE 3.2 P7), upgrade ISE (ISE 3.3) and update the Patch (P4)

Can you do any of these options ?

Hope this helps !!!