Cisco Identity Services Engine Installation Guide, Release 3.5

PDF

Linux KVM

Want to summarize with AI?

Log in

Overview

Provides instructions on how to install and configure Cisco ISE within your Linux KVM environment. This includes the technical procedures needed to verify host compatibility and ensure a successful deployment.


KVM virtualization check

Your host processor must support KVM virtualization. For Intel, check for VT-x. For AMD, check for AMD-V. Open a terminal window on your host and run the cat /proc/cpuinfo command. You should see either the "vmx" flag or the "svm" flag displayed in the command output.

  • For Intel VT-x:
    # cat /proc/cpuinfo
    flags: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx
    pdpe1gb rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc aperfmperf eagerfpu pni pclmulqdq dtes64 monitor
    ds_cpl vmx smx est tm2 ssse3 cx16 xtpr pdcm pcid dca sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx lahf_lm arat epb xsaveopt
    pln pts dtherm tpr_shadow vnmi flexpriority ept vpid
  • For AMD-V:
    # cat /proc/cpuinfo
    flags: fpu tsc msr pae mce cx8 apic mtrr mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt rdtscp lm 3dnowext 3dnow
     pni cx16 lahf_lm cmp_legacy svm cr8_legacy

Install Cisco ISE on KVM

This procedure explains how to create a keyboard, video, and mouse (KVM) environment on RHEL. It also describes how to install Cisco ISE on it using the virtual machine manager (virt-manager).

If you choose to install Cisco ISE through the CLI, enter a command similar to this one:

#virt-install --name= kvm-ise1  --arch=x86_64 --cpu=host --vcpus=2 --ram=4096 
--os-type=linux --os-variant=rhel6 --hvm --virt-type=kvm --cdrom= /home/admin/Desktop/ise-3.x.0.x.SPA.x86_64.iso  
--disk= /home/libvirt-images/kvm-ise1.img,size=300  
--network type=direct,model=virtio,source= eth2 ,source_mode=bridge 

where ise-3.5.0.x.SPA.x86_64.iso is the name of the Cisco ISE ISO image.

Before you begin

Download the Cisco ISE ISO image to your local system.

Procedure

1.

From the virtual machine manager window, click File and navigate to New Virtual Machine. In the Create a new virtual machine dialog box, complete these actions.

  1. Click Local install media (ISO media or CDROM) and click Forward.

  2. Uncheck the Automatically detect from the installation media/source check box.

  3. Choose Red Hat Enterprise Linux 8.2 from the OS drop-down list.

  4. Click Browse and choose the disk file system directory from the storage pools navigation pane.

  5. Click Browse Local and select the ISO image from your local system and click Open.

  6. Click Forward.

  7. Choose the Memory and CPU settings and click Forward.

  8. Check the Enable storage for the virtual machine check box.

  9. Click Select or create custom storage.

  10. Click Manage. In the Choose Storage Volume dialog box, complete these actions.

    1. Click + icon next to Volumes.

    2. Choose RAW from the Format drop-down list.

    3. Enter the Max Capacity as 300 GB.

      Note

      Use at least 300 GB for production PSN or pxGrid, and at least 600 GB for PAN or MnT personas. For detailed recommendations, refer to the table titled Recommended disk space for VMs in this guide.

    4. Click Finish.

  11. Choose the volume that you created and click Choose Volume.

  12. Click Forward.

  13. Check the Customize configuration before install check box and click Finish.

The installation screen appears.

2.

Click NIC:61:25:78 from the left navigation menu. Under Details tab, perform these actions.

  1. Choose Host device eno1:macvtap as the network source.

  2. Choose Bridge as the source mode.

  3. Choose virtio as the device model.

  4. Click Apply.

3.

Click Overview from the left navigation menu. Under Details tab, perform these actions.

  1. Choose the required firmware from the Firmware drop-down list.

  2. Click Apply.

4.

Click Begin Installation to install Cisco ISE on KVM.

The Cisco ISE installation boot menu appears.
5.

At the system prompt, enter 1 to continue with the installation.

6.

At the system prompt, type setup and press Enter.

The setup wizard appears and guides you through the initial configuration.
Note

You must add this text to the VM settings XML file (under vcpu information) while installing Cisco ISE on Ubuntu Linux KVM. Otherwise, serial number will not be properly displayed in the About ISE and Server window:

<sysinfo type="smbios">
  <system>
    <entry name="product">KVM</entry>
  </system>
  <baseBoard>
    <entry name="product">KVM</entry>
  </baseBoard>
</sysinfo>
<OS>
  <type arch="x86_64" machine="pc-q35-6.2">hvm</type>
  <boot dev="hd"/>
  <smbios mode="sysinfo"/>
</os>