How do I create a Repository in ISE for 1.2 upgrade?

[RSundstrom]

Hello,

I am upgrading out 1.1.4 ISE nodes to version 1.2 in the next few weeks. Following the Cisco guide for this I should create repositories on both our admin nodes and store the upgrade file locally. These repositories cannot be created using the UI. They must be created using the CLI.

How do I create and name the repositories so that I can ftp the upgrade file to this location?

Thank you.

[Naresh Ginjupalli · Accepted solution]

Hi Robert,

Here is the sample to create repository using CLI in ISE 1.1.4.

You can refer to the below document as reference.

http://www.cisco.com/en/US/docs/security/ise/1.1/cli_ref_guide/ise_cli_app_a.html#wp1013913

Example:

node1-poda/admin# configure terminal

Enter configuration commands, one per line.  End with CNTL/Z.

node1-poda/admin(config)# repository demo

node1-poda/admin(config-Repository)# url ftp://64.103.172.80/

node1-poda/admin(config-Repository)# user admin password plain admin123

node1-poda/admin(config-Repository)# exit

node1-poda/admin(config)# exit

node1-poda/admin#

[GerardoDuarte]

OK after looking at bunch of Cisco and dealt with TAC people, I got the answer. Let me explain my case so you can get info from that. I have 2 ISE devices and the one active one I was able to download the patch and install it via GUI. The second one is in a remote site and from the GUI I can not download the patch. Both nodes(devices) are able to ping each other  since this is a HA setup. After I copied the patch from the active node to the FTP:

DNS-NODE1/admin#copy disk:/ise-patchbundle-2.1.0.474-Patch3-196217.SPA.x86_64.tar.gz ftp://x.x.x.x

It will ask you for your user name and password. I used the user name that can get me inside the server therefore will allow me access to the FTP directory.

After checking the FTP root directory I logged into the other node(standby), this is the one I need to install the patch.

DNS-Node2/admin# copy ftp://x.x.x.x/ise-patchbundle-2.1.0.474-Patch3-201683.SPA.x86_64.tar.gz disk:

That will conclude the copying to and copying from. Then you can do the install.

[jwmolenaar · Accepted solution]

Hi Robert,

I would like to recommend you to copy the upgrade files to the ISE node using the command

"copy ftp://x.x.x.x/ise-upgradebundle-1.1.x-to-1.2.0.899.i386.tar.gz disk:"

Create a local repository if it does not exists.

!

repository DISK

  url disk:/

!

and upgrade the ISE appliance from the local repository

"application upgrade ise-upgradebundle-1.1.x-to-1.2.0.899.i386.tar.gz DISK"

[Jatin Katyal · Accepted solution]

Correct...Having the upgrade bundle in the local repository significantly reduces the time it takes to download it from the network during the upgrade process.

You may want to go through the below listed links

.

Important Notes To Read Before You Upgrade to Release 1.2

http://www.cisco.com/en/US/docs/security/ise/1.2/upgrade_guide/b_ise_upgrade_guide_chapter_01.html#ID50

https://supportforums.cisco.com/community/netpro/security/aaa/blog/2013/07/19/upgrading-to-identity-services-engine-ise-12

~BR
Jatin Katyal

**Do rate helpful posts**

[RSundstrom]

Thank you for your help. I kept getting a "Transfer Failed" message after attempting the ftp file transfer. It turned out it actually was transferring but not acknowledging it. All good now!