cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

207
Views
5
Helpful
2
Replies
Highlighted
Beginner

ISE add unpatched v2.6 node to patched v2.6p7 deployment - will it work?

Hello Cisco ISE Experts,

 

I checked documentation including patching FAQ and prior forum post and not clear what happens when one tries to new node to ISE deployment. Assume existing deployment is running with Patch N while the new node is just factory wipe (e.g. no patch).

Will it join and run happily ever after? Or will it be patched during join process?

 

Perhaps the node need to be patched before joining to ISE deployment. Here is good document describing step by step CLI patch deployment process - https://dependencyhell.net/2020-05-19-ise-standalone-patch/

 

Regards,

Serg

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
VIP Advisor

If you try to join an unpatched node to your deployment it will give you an error stating the new node is not patched. 

You need to patch it either through its gui or cli. From the cli it's quite easy, patch install <patch file name> <repo name>. The only caveat here is you need to define the repository first, either from the gui or cli. 

If you have the patch file locally, patching the new node from the gui just requires visiting the patch install page and selecting the file. 


 

View solution in original post

2 REPLIES 2
Highlighted
VIP Advisor

If you try to join an unpatched node to your deployment it will give you an error stating the new node is not patched. 

You need to patch it either through its gui or cli. From the cli it's quite easy, patch install <patch file name> <repo name>. The only caveat here is you need to define the repository first, either from the gui or cli. 

If you have the patch file locally, patching the new node from the gui just requires visiting the patch install page and selecting the file. 


 

View solution in original post

Highlighted

Thank you for the explanations. I will modify my planned work script. I somehow thought that GUI patching option is only available once ISE is part of the deployment, and not present while ISE is "virgin" just configured state.

It is shame Cisco does not provide slipstream ISO images with patches blended in.

Content for Community-Ad