ISE Upgrade Path

[Leroy Plock]

Greetings,

Got some other projects out of the way so finally getting back to our ISE deployment which is getting behind.

We are on 1.2.1 Patch 2. We want to get to 2.x of course, but that's very new, we'll let it bake for a while.

Looking at the downloads page, it apppears we will have to go to 1.3 or 1.4 on our way to 2.x.

So I'm thinking we will upgrade to 1.4 and run that for a few months before going to 2.x.

Question: Does this make sense?

Question: Is there any reason to apply the latest patch (8) for 1.2 before the 1.4 upgrade, or should I just go straight to 1.4?

Thank you.

[Tim Steele · Accepted solution]

Leroy,

You'll want to get to patch 5 at least before upgrading.  Take a look at the ISE 1.4 upgrade guide:

http://www.cisco.com/c/en/us/td/docs/security/ise/1-4/upgrade_guide/b_ise_upgrade_guide_14/b_ise_upgrade_guide_14_chapter_01.html#ID7

Tim

[Leroy Plock]

Doh! Well that settles that. As long as I'm patching I'll go to 8. Thanks.

[Tim Steele]

No worries, glad to help!

Tim

[Leroy Plock]

So the 1.2.1 Patch 8 install was no problem.

Now I'm prepping for the 1.2.1 to 1.4 upgrade.

The upgrade guide describes a 2 node scenario and a Distributed scenario. Our deployment falls in between:

Node A: Primary Admin, Secondary MnT
Node B: Primary MnT, Secondary Admin
Node C: Policy Services Node only
Node D: Policy Services Node only

Extrapolating from the 2 scenarios, I think my upgrade order will be:
1st: Node B
2nd: Node C
3rd: Node D
Last: Node A

Does that sound right?

[Tim Steele · Accepted solution]

Yep, looks good.  Be sure to grab a successful backup before you start. :)

Also, be sure to review the post-upgrade tasks in the 1.4 upgrade guide. 

[Leroy Plock]

Fer sure. We're running it in the lab first...