KVM Hypervisor Support
Cisco ISE supports KVM hypervisor on Red Hat Enterprise Linux (RHEL) 7.0.
KVM Virtualization Check
KVM virtualization requires virtualization support from the host processor; Intel VT-x for Intel processors and AMD-V for AMD processors. Open a terminal window on the host and enter the cat /proc/cpuinfo command. You must see either the vmx or the svm flag.
For Intel VT-x:
# cat /proc/cpuinfo flags: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx pdpe1gb rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc aperfmperf eagerfpu pni pclmulqdq dtes64 monitor ds_cpl vmx smx est tm2 ssse3 cx16 xtpr pdcm pcid dca sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx lahf_lm arat epb xsaveopt pln pts dtherm tpr_shadow vnmi flexpriority ept vpid
# cat /proc/cpuinfo flags: fpu tsc msr pae mce cx8 apic mtrr mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt rdtscp lm 3dnowext 3dnow pni cx16 lahf_lm cmp_legacy svm cr8_legacy
Virtual Machine Resource and Performance Checks
Before installing Cisco ISE on a virtual machine, the installer performs hardware integrity checks by comparing the available hardware resources on the virtual machine with the recommended specifications.
During a VM resource check, the installer checks for the hard disk space, number of CPU cores allocated to the VM, CPU clock speed, and RAM allocated to the VM. If the VM resources do not meet the basic evaluation specifications, the installation aborts. This resource check is applicable only for ISO-based installations.
When you run the Setup program, a VM performance check is done, where the installer checks for disk I/O performance. If the disk I/O performance does not meet the recommended specifications, a warning appears on screen, but it allows you to continue with the installation. This performance verification check is applicable for both ISO-based and OVA (VMware) installations.
The VM performance check is done periodically (every hour) and the results are averaged for a day. If the disk I/O performance does not meet the recommended specification, an alarm is generated.
The VM performance check can also be done on demand from the Cisco ISE CLI using the show tech-support command.
The VM resource and performance checks can be run independent of Cisco ISE installation. You can perform this test from the Cisco ISE boot menu.
On-Demand Virtual Machine Performance Check Using the show tech-support Command
You can run the show tech-support command from the CLI to check the VM performance at any point of time. The output of this command will be similar to the following:
ise-vm123/admin# show tech | begin "disk IO perf" Measuring disk IO performance ***************************************** Average I/O bandwidth writing to disk device: 48 MB/second Average I/O bandwidth reading from disk device: 193 MB/second WARNING: VM I/O PERFORMANCE TESTS FAILED! WARNING: The bandwidth writing to disk must be at least 50 MB/second, WARNING: and bandwidth reading from disk must be at least 300 MB/second. WARNING: This VM should not be used for production use until disk WARNING: performance issue is addressed. Disk I/O bandwidth filesystem test, writing 300 MB to /opt: 314572800 bytes (315 MB) copied, 7.81502 s, 40.3 MB/s Disk I/O bandwidth filesystem read test, reading 300 MB from /opt: 314572800 bytes (315 MB) copied, 0.416897 s, 755 MB/s
Virtual Machine Resource Check from the Cisco ISE Boot Menu
You can check for virtual machine resources independent of Cisco ISE installation from the boot menu.
The CLI transcript appears as follows:
Welcome to the Cisco Identity Services Engine Installer Cisco ISE Version: 188.8.131.52 Available boot options:  Cisco ISE Installation (Keyboard/Monitor)  Cisco ISE Installation (Serial Console)  System Utilities (Keyboard/Monitor)  System Utilities (Serial Console) <Enter> Boot existing OS from hard disk. Enter boot option and press <Enter>.
From the CLI boot menu, enter 3 or 4 to go to the System Utilities menu.
Cisco ISE System Utilities Menu Available System Utilities:  Recover administrator password  Virtual Machine Resource Check  System Erase  Install Media Check [q] Exit and reload Enter option and press <Enter>
Enter 2 to check for VM resources. The output will be similar to the following:
***** ***** Virtual Machine host detected… ***** Hard disk(s) total size detected: 322 Gigabyte ***** Physical RAM size detected: 40443664 Kbytes ***** Number of network interfaces detected: 1 ***** Number of CPU cores: 2 ***** CPU Mhz: 2300.00 ***** Verifying CPU requirement… ***** Verifying RAM requirement… ***** Writing disk partition table…