Provides instructions on how to install and configure Cisco ISE within your Linux KVM environment. This includes the technical procedures needed to verify host compatibility and ensure a successful deployment.
KVM virtualization check
Your host processor must support KVM virtualization. For Intel, check for VT-x. For AMD, check for AMD-V. Open a terminal window on your host and run the cat /proc/cpuinfo command. You should see either the "vmx" flag or the "svm" flag displayed in the command output.
-
For Intel VT-x:
# cat /proc/cpuinfo flags: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx pdpe1gb rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc aperfmperf eagerfpu pni pclmulqdq dtes64 monitor ds_cpl vmx smx est tm2 ssse3 cx16 xtpr pdcm pcid dca sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx lahf_lm arat epb xsaveopt pln pts dtherm tpr_shadow vnmi flexpriority ept vpid -
For AMD-V:
# cat /proc/cpuinfo flags: fpu tsc msr pae mce cx8 apic mtrr mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt rdtscp lm 3dnowext 3dnow pni cx16 lahf_lm cmp_legacy svm cr8_legacy
Install Cisco ISE on KVM
This procedure explains how to create a keyboard, video, and mouse (KVM) environment on RHEL. It also describes how to install Cisco ISE on it using the virtual machine manager (virt-manager).
If you choose to install Cisco ISE through the CLI, enter a command similar to this one:
#virt-install --name= kvm-ise1 --arch=x86_64 --cpu=host --vcpus=2 --ram=4096
--os-type=linux --os-variant=rhel6 --hvm --virt-type=kvm --cdrom= /home/admin/Desktop/ise-3.x.0.x.SPA.x86_64.iso
--disk= /home/libvirt-images/kvm-ise1.img,size=300
--network type=direct,model=virtio,source= eth2 ,source_mode=bridge
where ise-3.5.0.x.SPA.x86_64.iso is the name of the Cisco ISE ISO image.
Before you begin
Download the Cisco ISE ISO image to your local system.
Procedure
You must add this text to the VM settings XML file (under vcpu information) while installing Cisco ISE on Ubuntu Linux KVM. Otherwise, serial number will not be properly displayed in the About ISE and Server window:
<sysinfo type="smbios"> <system> <entry name="product">KVM</entry> </system> <baseBoard> <entry name="product">KVM</entry> </baseBoard> </sysinfo> <OS> <type arch="x86_64" machine="pc-q35-6.2">hvm</type> <boot dev="hd"/> <smbios mode="sysinfo"/> </os>