03-26-2020 11:46 PM
Dear experts,
My customer is planning to upgrade 2.4 patch 11 to the cisco ISE node. It is a 2 node deployment with 2.4 patch 5 installed. According to the document, we should be able to install 2.4 patch 11.
I'm planning to install the patch via GUI, It will upgrade the primary PAN and then the secondary PAN, will there be a downtime for the services? Since patching the Primary PAN the secondary node is still functional working. After the primary node patched successfully, it should available to service and the secondary node starts patching.
And another query is that currently the memory and the disk are high usages for the ISE nodes. I think we should have at least the space for the patch packet to upload to the ISE. Where the patch upload to when we uploaded via GUI, should we just check the disk? (Command "show disk" to see the space left?)
Thanks for your time for the query, looking forward to the feedback!
Best Regards
zeryu
Solved! Go to Solution.
03-27-2020 09:11 AM
03-26-2020 11:53 PM
03-27-2020 12:14 AM
Hi Damien,
Thanks for your quick reply. Please let me explain more.
There are 2 PSN in the deployment and the NADs all pointed to both ISE nodes, currently, the ISE is a TACACS server. Assuming the ISE-1 node is installing the patch and ISE-2 node is waiting, the ISE-2 node still can answer the TACACS request and the admin can log in to the NAD and input the CLI based on the policy configured on ISE right?
And after the ISE-1 node finished installing the patch, the ISE-2 node starts installing the patch, so the NAD can send TACACS queries to the ISE-1 node, so can we say there is just going to be limited time (like 1-2 minutes) that 2 ISE node are all not running services?
And for the disk size, just checked on the cisco webpage that the size is 2453.92 MB, please correct me if I'm wrong, as long as the both ISE node disk has a free size bigger than the 2453.92 MB, it should not affect the patch installation process am I right? (I assume that upload patch packet via webpage will upload to the ISE disk and I input the CLI "show disk" will show the remaining space for the ISE node)
Thanks again for your response.
Best Regards
Zerui
03-27-2020 09:11 AM
03-28-2020 10:30 PM
Noted with that. We will check with TAC before we install the patch with the disk free size issue. Thanks for your reply. Have a nice day!
Zerui
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide