Cisco Identity Services Engine Hardware Installation Guide, Release 1.2
Installing Release 1.2 Software on Cisco ISE 3300 Series, Cisco NAC, and Cisco Secure ACS Appliances
Downloads: This chapterpdf (PDF - 92.0KB) The complete bookPDF (PDF - 8.01MB) | Feedback

Table of Contents

Installing Release 1.2 Software on Cisco ISE 3300 Series, Cisco NAC, and Cisco Secure ACS Appliances

Installing Cisco ISE, Release 1.2, Software from a DVD

Installing Cisco ISE Software on a Reimaged Cisco ISE-3300 Series Appliance

Installing Cisco ISE Software on a Reimaged Cisco Secure ACS Appliance

Installing Cisco ISE Software on a Reimaged Cisco NAC Appliance

Resetting the Existing RAID Configuration on a Cisco NAC Appliance

Installing Release 1.2 Software on Cisco ISE 3300 Series, Cisco NAC, and Cisco Secure ACS Appliances

This appendix describes the process for performing an initial (or fresh) installation of the Cisco ISE, Release 1.2, software from a DVD on the following supported Cisco ISE-3300, Cisco Secure ACS, and Cisco NAC appliance platforms:

  • Cisco ISE-3315
  • Cisco ISE-3355
  • Cisco ISE-3395
  • Cisco Secure ACS-1121
  • Cisco NAC-3315
  • Cisco NAC-3355
  • Cisco NAC-3395

NoteDownload the Cisco ISE, Release 1.2, ISO image, burn the ISO image on a DVD, and use it to install Release 1.2 on the Cisco ISE-3300 series, and legacy Cisco NAC and Cisco Secure ACS appliances.


Installing the software on a Cisco Secure ACS or Cisco NAC appliance is a simplified process because the underlying hardware on which the Cisco ISE software will be installed is the same physical device type.

  • Cisco Secure ACS-1121 and Cisco NAC-3315 appliances are based on the same physical hardware that are used for small Cisco ISE network deployments (Cisco ISE 3315 appliances).
  • Cisco NAC-3355 and Cisco NAC-3395 appliances are based on the same physical hardware that are used for medium and large Cisco ISE network deployments (Cisco ISE 3355 and Cisco ISE 3395 appliances, respectively).

NoteFor specific details about the Cisco ISE 3300 series hardware platforms, see theCisco Identity Services Engine Hardware Installation Guide, Release 1.1.x.


This appendix describes the following procedures:


NoteTo reuse a Cisco Secure ACS or Cisco NAC appliance as a Cisco ISE, Release 1.2 appliance, reimage the Cisco Secure ACS or Cisco NAC appliance, install the Cisco ISE software, and use the Setup program to configure the appliance.


Installing Cisco ISE, Release 1.2, Software from a DVD

Before You Begin

  • Download the Cisco ISE 1.2, Release 1.2, or Inline Posture node ISO image, burn the ISO image on a DVD, and use it to install Release 1.2 on the Cisco ISE-3300 series, and legacy Cisco NAC and Cisco Secure ACS appliances.
  • Review the Cisco ISE Setup Program Parameters and have this information ready before you run the setup program.

Step 1 Connect a keyboard and a VGA monitor to the appliance.

Step 2 Ensure that a power cord is connected to the appliance, insert the DVD in the appliance CD/DVD drive, and turn on the appliance.

The console displays the boot options.

Step 3 At the boot prompt, enter 1 and press Enter .

Step 4 At the prompt, type setup to start the setup program.

Step 5 Enter the values for the setup program parameters.

After the Cisco ISE or IPN software is configured, the system reboots automatically. To log back in to the CLI, you must enter the CLI-admin user credentials that you configured during setup.


 

What To Do Next

  • If you installed the IPN ISO, go to Configuring Certificates for Inline Posture Nodes.
  • If you installed the Cisco ISE, Release 1.2 ISO image, after you log in to the Cisco ISE CLI shell, you can run the show application status ise CLI command to check the status of the Cisco ISE application processes.

Installing Cisco ISE Software on a Reimaged Cisco ISE-3300 Series Appliance

This section provides the procedure for reimaging an existing Cisco ISE-3300 Series appliance as a Cisco ISE 1.2 appliance.

Before You Begin


Step 1 If the Cisco ISE appliance is on, turn it off.

Step 2 Turn on the Cisco ISE appliance.

Step 3 Press F1 to enter the BIOS setup mode.

Step 4 Use the arrow keys to navigate to the Date and Time field and press Enter .

Step 5 Set the time to the UTC/GMT time zone.


Note We recommend that you set all Cisco ISE nodes to the UTC time zone. This time zone setting ensures that the reports and logs from the various nodes in a deployment are always in sync with regard to the time stamps.


Step 6 Press Esc to exit to main BIOS menu.

Step 7 Press Esc to exit from the BIOS setup mode.

Step 8 Perform the instructions described in Installing Cisco ISE, Release 1.2, Software from a DVD.

Step 9 Perform the instructions described in Setup Process Verification.


 

Installing Cisco ISE Software on a Reimaged Cisco Secure ACS Appliance

This section provides the procedure for reimaging an existing Cisco Secure ACS appliance as a Cisco ISE, Release 1.2, appliance.

Before You Begin


Step 1 If the Cisco Secure ACS appliance is on, turn it off.

Step 2 Turn on the Cisco Secure ACS appliance.

Step 3 Press F1 to enter the BIOS setup mode.

Step 4 Use the arrow keys to navigate to the Date and Time field and press Enter .

Step 5 Set the time for your appliance to the UTC/GMT time zone.


Note We recommend that you set all Cisco ISE nodes to the UTC time zone. This time zone setting ensures that the reports and logs from the various nodes in a deployment are always in sync with regard to the time stamps.


Step 6 Press Esc to exit to main BIOS menu.

Step 7 Press Esc to exit from the BIOS setup mode.

Step 8 Perform the instructions described in Installing Cisco ISE, Release 1.2, Software from a DVD.

Step 9 Perform the instructions described in Setup Process Verification.


 

Installing Cisco ISE Software on a Reimaged Cisco NAC Appliance

This section provides the procedure for reimaging an existing Cisco NAC appliance as a Cisco ISE 1.2 appliance.

Before You Begin


Step 1 If the Cisco NAC appliance is on, turn it off.

Step 2 Turn on the Cisco NAC appliance.

Step 3 Press F1 to enter the BIOS setup mode.

Step 4 Using the arrow keys, navigate to the Date and Time field and press Enter .

Step 5 Set the time for your appliance to the UTC/GMT time zone.


Note We recommend that you set all Cisco ISE nodes to the UTC time zone. This time zone setting ensures that the reports and logs from the various nodes in a deployment are always in sync with regard to the time stamps.


Step 6 Press Esc to exit to main BIOS menu.

Step 7 Press Esc to exit from the BIOS setup mode.


Note If the Cisco ISE DVD installation process returns a message indicating that “The installer requires at least 600 GB disk space for this appliance type,” you may need to reset the RAID settings on the appliance to facilitate installation as described in Resetting the Existing RAID Configuration on a Cisco NAC Appliance.


Step 8 Perform the instructions that are described in Installing Cisco ISE, Release 1.2, Software from a DVD.

Step 9 Perform the instructions that are described in Setup Process Verification.


 

Resetting the Existing RAID Configuration on a Cisco NAC Appliance

It may be necessary to reset the RAID settings on your NAC appliance to facilitate Cisco ISE 1.2 installation.


Step 1 Reboot the Cisco NAC appliance with the Cisco ISE Software DVD.

Step 2 When you see the RAID controller version information appear in the CLI, press Ctrl-C . The RAID controller version information appears, displaying a label like LSI Corporation MPT SAS BIOS , and the LSI Corp Config Utility becomes active.

Step 3 Press Enter to specify the default controller. (The highlighted controller name should read something similar to SR-BR10i .) A screen containing the Cisco NAC appliance adapter information appears.

Step 4 Use the arrow keys to navigate to “RAID properties” and press Enter .

Step 5 Use the arrow keys to navigate to “Manage Array” and press Enter .

Step 6 Use the arrow keys to navigate to “Delete Array” and press Enter .

Step 7 Enter Y to confirm that you want to delete the existing RAID array.

Step 8 Press Esc twice to exit the RAID configuration utility.

The system prompts you with an Exit the Configuration Utility and Reboot? prompt.

Step 9 Press Enter . The Cisco NAC appliance reboots. As long as the Cisco ISE Software DVD is still inserted, the appliance automatically boots to the install menu.

Step 10 Press 1 to begin the Cisco ISE, Release 1.2, installation.