ISE Migration v1.4 (3355 appliances) to v2.3 (3515 appliances)

[Dmitry Kazakov]

Good day team.

We have an upgrade path question, having current installation running on 4x 3355 appliances with 1.4 version of ISE we are planning an upgrade to new 4x 3515 appliances with a target version of 2.3.

If we take a look at upgrade path available I see a gap there:

You can directly upgrade to Cisco ISE, Release 2.0, from any of the following releases:

• Cisco ISE, Release 1.3
• Cisco ISE, Release 1.3 patch 1 or later
• Cisco ISE, Release 1.4
• Cisco ISE, Release 1.4 patch 3

You can directly upgrade to Release 2.3, from any of the following releases:

• Cisco ISE, Release 2.0
• Cisco ISE, Release 2.0.1
• Cisco ISE, Release 2.1
• Cisco ISE, Release 2.2

The problem is that 3300 appliances are not able to run v2.0, which is required for upgrade path to 2.3.

3500 appliances need to run ISE versions not earlier than 2.0.1 requiring a UEFI Secure boot.

So it seems like we have a problem moving to target upgrade with configuration migration. Could you please advice on the procedure and upgrade steps.

Thanks in advance,

Best regards,

Dmitry Kazakov

[Jason Kunst · Accepted solution]

The current recommended release is 2.2

Here are the steps recommended

Backup 1.4

Install 2.2 latest patch on new appliances - 1 pan 1 mnt

Restore the backup

Add PSN to deployment

Validate system works in parallel on subset of network devices

Once system stable then finish installing 2.2 on more appliances and adding to deployment and then cutting systems off 1.4 deployment

Then if necessary to go to 2.3 do same over again

Or follow split upgrade model per admin guide

[Dmitry Kazakov]

Thanks a lot, Jason!

От: Jason Kunst <community@cisco.com>

Обратный адрес: "jive-1621425948-2srr-2-5zhd@cisco-marketing.hosted.jivesoftware.com" <jive-1621425948-2srr-2-5zhd@cisco-marketing.hosted.jivesoftware.com>

Дата: понедельник, 15 января 2018 г., 15:56

Кому: Cisco Employee <dkazakov@cisco.com>

Тема: Re: - ISE Migration v1.4 (3355 appliances) to v2.3 (3515 appliances)

Cisco Communities <https://communities.cisco.com/>

ISE Migration v1.4 (3355 appliances) to v2.3 (3515 appliances)

reply from Jason Kunst<https://communities.cisco.com/people/jakunst> in Technology > Security > Policy and Access > Identity Services Engine (ISE) - View the full discussion<https://communities.cisco.com/message/279265#279265>