cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

786
Views
0
Helpful
2
Replies
Jim Blake
Beginner

Upgrade an ISE and Add Resilience

My customer has a single standalone ISE, running on a VM Host, vers 1.3. They want to increase the use of the ISE, so are proposing that it should be upgraded to the latest revision (2.x) and a second ISE. My question is simply this: Which is the safest change path? Upgrade then add a second unit, or add a second unit and then upgrade?

 

Thanks

 

Jim

1 ACCEPTED SOLUTION

Accepted Solutions

So build a new stand-alone system on a new VM Host, load certs on it from the CA (hope they have wildcards) and chop the network over to the new system. Test, ensure it all works, then rebuild the original from scratch at 2.x on the old VM host, but leaving the original system available as a "get out of Gaol", then enable the ISE on the old platform as slave, with the new 2.7 as master? Sounds reasonable....as a matter of interest - how many steps are involved to upgrade from 1.3 to 2.7?

 

Thanks

Jim

 

 

View solution in original post

2 REPLIES 2
Marvin Rhoads
VIP Community Legend

ISE 1.3 is very old and will be very laborious to upgrade to the current recommended 2.7. If the deployment is pretty basic I'd recommend just rebuilding the policies and other elements on a brand new server.

Otherwise you are looking at multiple backup and restore operations or inline upgrades.

So build a new stand-alone system on a new VM Host, load certs on it from the CA (hope they have wildcards) and chop the network over to the new system. Test, ensure it all works, then rebuild the original from scratch at 2.x on the old VM host, but leaving the original system available as a "get out of Gaol", then enable the ISE on the old platform as slave, with the new 2.7 as master? Sounds reasonable....as a matter of interest - how many steps are involved to upgrade from 1.3 to 2.7?

 

Thanks

Jim

 

 

View solution in original post

创建
Recognize Your Peers
Content for Community-Ad

ISE Webinars



Did you miss a previous ISE webinar?

CiscoISE YouTube Channel