Cisco Identity Services Engine Hardware Installation Guide, Release 1.1.x
Appendix I, Installing Cisco ISE Software on Cisco NAC and Cisco Secure ACS Appliances
Downloads: This chapterpdf (PDF - 73.0KB) The complete bookPDF (PDF - 8.2MB) | Feedback

Table of Contents

Installing Cisco ISE on Cisco NAC and Cisco Secure ACS Appliances

Installing Cisco ISE Software on a Reimaged Cisco Secure ACS Appliance

Installing Cisco ISE Software on a Reimaged Cisco NAC Appliance

Resetting the Existing RAID Configuration on a Cisco NAC Appliance

Installing Cisco ISE on Cisco NAC and Cisco Secure ACS Appliances

This appendix describes the process for performing an initial (or fresh) installation of the Cisco ISE 3300 Series software from the Cisco Identity Services Engine ISE VM Appliance (ISE Software Version 1.1.1.xxx) DVD on the following supported Cisco Secure ACS and Cisco NAC Appliance platforms:

  • Cisco Secure ACS-1121
  • Cisco NAC-3315
  • Cisco NAC-3355
  • Cisco NAC-3395

Installing the Cisco ISE 3300 Series software on a Cisco Secure ACS or Cisco NAC appliance is a simplified process because the underlying hardware on which the Cisco ISE software will be installed is the same physical device type:

  • Cisco Secure ACS-1121 and Cisco NAC-3315 appliances are based on the same physical hardware that are used for small Cisco ISE network deployments (Cisco ISE 3315 appliance).
  • Cisco NAC-3355 and Cisco NAC-3395 appliances are based on the same physical hardware that are used for medium and large Cisco ISE network deployments (Cisco ISE 3355 and Cisco ISE 3395 appliances, respectively).

Note For specific details about the Cisco ISE 3300 Series hardware platforms, see Table 1-1.


This appendix describes the following procedures:

  • Installing Cisco ISE Software on a Reimaged Cisco Secure ACS Appliance—Provides instructions for installing the Cisco ISE software with the use of the Cisco Identity Services Engine ISE VM Appliance (ISE Software Version 1.1.1.xxx) DVD, configuring the appliance by using the Setup program, and verifying the configuration process.
  • Installing Cisco ISE Software on a Reimaged Cisco NAC Appliance—Provides instructions for installing the Cisco ISE software with the use of the Cisco Identity Services Engine ISE VM Appliance (ISE Software Version 1.1.1.xxx) DVD, including ho to reset the RAID configuration on the Cisco NAC appliance before you can complete the reimage process.

Note To reimage a Cisco Secure ACS or Cisco NAC appliance as a Cisco ISE 3300 Series appliance, install the Cisco ISE software, and use the Setup program to configure the appliance.


Installing Cisco ISE Software on a Reimaged Cisco Secure ACS Appliance

This section provides the procedure for reimaging an existing Cisco Secure ACS appliance as a Cisco ISE 3300 Series, Release 1.0, appliance.

To reimage a Cisco Secure ACS appliance as a Cisco ISE 3300 Series appliance, complete the following steps:


Step 1 If the Cisco Secure ACS appliance is on, turn off the appliance.

Step 2 Turn on the Cisco Secure ACS appliance.

Step 3 Press F1 to enter the BIOS setup mode.

Step 4 Use the arrow key to navigate to Date and Time and press Enter .

Step 5 Set the time for your appliance to the UTC/GMT time zone.


Note We recommend that you set all Cisco ISE nodes to the UTC time zone. This time zone setting ensures that the reports and logs from the various nodes in your deployment are always in sync with regard to the timestamps.


Step 6 Press Esc to exit to main BIOS menu.

Step 7 Press Esc to exit from the BIOS setup mode.

Step 8 Perform the instructions described in Before Configuring a Cisco ISE Series Appliance.

Step 9 Perform the instructions described in Understanding the Setup Program Parameters.

Step 10 Perform the instructions described in Verifying the Configuration Process.


 

Installing Cisco ISE Software on a Reimaged Cisco NAC Appliance

This section provides the procedure for reimaging an existing Cisco NAC appliance as a Cisco ISE 3300 Series, Release 1.0, appliance.

To reimage a Cisco NAC appliance as a Cisco ISE appliance, complete the following steps:


Step 1 If the Cisco NAC appliance is on, turn off the appliance.

Step 2 Turn on the Cisco NAC appliance.

Step 3 Press F1 to enter the BIOS setup mode.

Step 4 Using the arrow key, navigate to Date and Time and press Enter .

Step 5 Set the time for your appliance to the UTC/GMT time zone.


Note We recommend that you set all Cisco ISE nodes to the UTC time zone. This time zone setting ensures that the reports and logs from the various nodes in your deployment are always in sync with regard to the timestamps.


Step 6 Press Esc to exit to main BIOS menu.

Step 7 Press Esc to exit from the BIOS setup mode.


Note If the Cisco ISE DVD installation process returns a message indicating that “The installer requires at least 600GB disk space for this appliance type,” you may need to reset the RAID settings on the appliance to facilitate installation as described in Resetting the Existing RAID Configuration on a Cisco NAC Appliance.


Step 8 Perform the instructions that are described in Before Configuring a Cisco ISE Series Appliance.

Step 9 Perform the instructions that are described in Understanding the Setup Program Parameters.

Step 10 Perform the instructions that are described in Verifying the Configuration Process.


 

Resetting the Existing RAID Configuration on a Cisco NAC Appliance

To reset the RAID settings on a Cisco NAC appliance:


Step 1 Reboot the Cisco NAC appliance with the Cisco Identity Services Engine ISE VM Appliance (ISE Software Version 1.1.1.xxx) DVD installed.

Step 2 When you see the RAID controller version information appear in the CLI, press Ctrl+C . The RAID controller version information appears, displaying a label like LSI Corporation MPT SAS BIOS , and the LSI Corp Config Utility becomes active.

Step 3 Press Enter to specify the default controller. (The highlighted controller name should read something similar to SR-BR10i .) A screen containing the Cisco NAC appliance adapter information appears.

Step 4 Arrow down to “RAID properties” and press Enter .

Step 5 Press Enter again on “Manage Array.”

Step 6 Arrow down to the “Delete Array” option and press Enter .

Step 7 Enter “Y” to confirm that you want to delete the existing RAID Array.

Step 8 Press Esc twice to exit the RAID configuration utility. You are prompted with an Exit the Configuration Utility and Reboot? prompt.

Step 9 Press Enter . The Cisco NAC appliance reboots. As long as the Cisco Identity Services Engine ISE VM Appliance (ISE Software Version 1.1.1.xxx) DVD is still installed, the appliance automatically boots to the install menu.

Step 10 Press 1 to begin Cisco ISE installation.