topic Thanks for your help Marvin in Network Access Control

Issue on my first installment of cisco ISE

Terry Lee — Mon, 11 Mar 2019 05:18:56 GMT

Hi, Thanks in advance,

This is my first time of being implementing cisco ISE 1.1.4 with Vmware Esxi v5.5

I have done following processes so far

- Created NTP,DNS,AD, of course ESXI up and running and have connection between all of them, ISE is able to sync time with ntp server as well as DNS, AD etc.

- I have created repository for installing application bundle - which is ise-appbundle-1.1.4.218.i386 as I could not find any application default.

However, while i was doing installation and it says '/opt/oracle/base/product/11.2.0/dbhome_1/bin/lsnrctl: error while loading shared libraries: libclntsh.so.11.1: cannot open shared object file: No such file or directory'.

I already check few forums and communities and I have no problems on syncing times on dns with ntp as well as ISE itself with ntp.

I have no firewall between devices and no other network devices are interfering.

and At the end of the logs, It comes up like this

########################################################################################

ERROR : FAILED TO START DB!

Database is not available within timeout of 240 seconds.

This could be the result of incorrect network interface configuration,

or lack of resources on the appliance or VM. Please fix the issue and run the following CLI to re-prime database:

'application reset-config ise'

########################################################################################

Im just lost now... Any recommendation ?

What ISE version are you

jan.nielsen — Wed, 31 Dec 2014 12:42:33 GMT

What ISE version are you upgrading from, what patch level?

Hi , Jan, Im doing it from

Terry Lee — Wed, 31 Dec 2014 13:57:19 GMT

Hi , Jan,

Im doing it from scratch. its v1.1.4 and I dont have any application on it so Im trying to installing it

If it's a lab or a greenfield

Marvin Rhoads — Wed, 31 Dec 2014 14:01:28 GMT

If it's a lab or a greenfield installation I wouldn't even mess with ISE 1.1. There are a fair number of dependencies and complexities upgrading those earlier versions. Also, ISE 1.1 is not supported on VMware ESXi 5.5.

The current release is 1.3 and is better in almost every possible way.

Thanks for your answer Marvin

Terry Lee — Wed, 31 Dec 2014 14:10:18 GMT

Thanks for your answer Marvin ,

I need to have ISE 1.1 up and running as Im preparing for my CCIE security LAB exam.

Is there many differences between 1.3 and 1.1 ?

As CCIE SECURITY covers ISE v1.1.

Regards.

Well it's true that the CCIE

Marvin Rhoads — Wed, 31 Dec 2014 14:46:26 GMT

Well it's true that the CCIE Security uses ISE 1.1 as its basis. So for lab-only setup with that purpose you could go with it.

90% of things look the same and the concepts are identical from 1.1 to 1.3. Early versions were buggy though and we recommend all production users go with 1.3.

A fresh install of 1.14 should be OK; but you would not use the ISE appbundle gz archive - you would use the ISO for fresh install.

Please see screenshot below.

Thanks for your help Marvin

Terry Lee — Sat, 03 Jan 2015 02:56:37 GMT

Thanks for your help Marvin

with ISO file, do I have to import its ISO file for application install?

I cannot find application ise by default once I install it on ESXi.

As my understanding , I have to install it first with ISO and import its file again with repository for application install

For an ISE 1.1.4 ISO , follow

Marvin Rhoads — Sat, 03 Jan 2015 03:19:11 GMT

For an ISE 1.1.4 ISO , follow the procedure here to build an ISE server VM from scratch.

No repository is required or even involved during installation. Following the procedure will result in an operational ISE server (single node deployment with PAN, MnT and PSN personae) ready for creation of identity stores, authentication (AuthC) and authorization (AuthZ) policies etc.

Thanks for your quick notice,

Terry Lee — Sat, 03 Jan 2015 03:26:35 GMT

Thanks for your quick notice,

Do I have access to WEB GUI ?

Ok, Inline Posture Node is

Terry Lee — Sat, 03 Jan 2015 03:45:34 GMT

Ok,

Inline Posture Node is not supporting WEB GUI access, so how to start deploying WEB GUI? with this ? or do I have to change the deployment?

An IPN does not have a web

Marvin Rhoads — Sat, 03 Jan 2015 04:16:53 GMT

You've been asking about a primary ISE server - IPN (Inline Posture Node) is a separate persona that exists by itself and only as part of a larger multi-server deployment.

An IPN does not have a web GUI. It's basically a repackaging on the old NAC appliance. It has only command line interface (cli) and is managed (other than setup) via the Primary Admin Node (PAN) in an ISE deployment.

If you installed the ise-appbundle ISO I showed above that would not include the IPN.