cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
701
Views
0
Helpful
7
Replies

CIsco ISE 1.2 to 1.3 upgrade

abhishek.marat1
Level 1
Level 1

I am planning for an ISE upgrade from version 1.2 to 1.3. I have two nodes (primary admin, secondary monitoring (ISE 3355) in one box and secondary admin, primary monitoring in the other (3315).) and 8 PSNs (all 3315).

My question is after upgrading when we are testing for failover of the HA pairs in both the nodes…are we going to face any technical complications because of the different model numbers. All nodes (2 +8= 10) are in different locations.

2 Accepted Solutions

Accepted Solutions

nspasov
Cisco Employee
Cisco Employee

I don't believe there are any requirements to have identical hardware when it comes to a distributed deployment. 

http://www.cisco.com/c/en/us/td/docs/security/ise/1-3/installation_guide/b_ise_InstallationGuide13/b_ise_InstallationGuide12_chapter_00.html#ID-1413-00000042

With that being said, it is probably a good idea to keep the Admin and Monitoring nodes on the same type of hardware specs. 

 

Thank you for rating helpful posts!

View solution in original post

Kanwaljeet Singh
Cisco Employee
Cisco Employee

Hi Abhishek,

There is no restriction on the model number but the versions running should be same on primary and secondary in the distributed deployment. Please look at the guidelines below:

http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_user_guide/ise_dis_deploy.html#53463

Regards,

Kanwal

Note: Please mark answers if they are helpful.

View solution in original post

7 Replies 7

nspasov
Cisco Employee
Cisco Employee

I don't believe there are any requirements to have identical hardware when it comes to a distributed deployment. 

http://www.cisco.com/c/en/us/td/docs/security/ise/1-3/installation_guide/b_ise_InstallationGuide13/b_ise_InstallationGuide12_chapter_00.html#ID-1413-00000042

With that being said, it is probably a good idea to keep the Admin and Monitoring nodes on the same type of hardware specs. 

 

Thank you for rating helpful posts!

Thank you!

No problem! If your issue is resolved you should mark the thread as "answered" :)

Kanwaljeet Singh
Cisco Employee
Cisco Employee

Hi Abhishek,

There is no restriction on the model number but the versions running should be same on primary and secondary in the distributed deployment. Please look at the guidelines below:

http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_user_guide/ise_dis_deploy.html#53463

Regards,

Kanwal

Note: Please mark answers if they are helpful.

Thank you!

mohanak
Cisco Employee
Cisco Employee

You must first upgrade the secondary Administration node to Release 1.3. For example, if you have a deployment set up as shown in the following figure, with one primary Administration node (node A), one secondary Administration node (node B), one Inline Posture node (IPN) (node C), and four Policy Service nodes (PSNs) (node D, node E, node F, and node G), one primary Monitoring node ( node H), and one secondary Monitoring node (node I), you can proceed with the following upgrade procedure.

http://www.cisco.com/c/en/us/td/docs/security/ise/1-3/upgrade_guide/b_ise_upgrade_guide_13/b_ise_upgrade_guide_chapter_01.html#ID20

Before You Begin : http://www.cisco.com/c/en/us/td/docs/security/ise/1-3/upgrade_guide/b_ise_upgrade_guide_13/b_ise_upgrade_guide_13_chapter_011.html

Thank you!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: