Upgrade to Cisco ISE CPU/memory

Similar Questions

• Upgrade to Cisco ISE

  Hello

  I have cisco ISE 1.0, which I want to spend 1.3 ISE. According to the upgrade path, I would need to follow this process

  1.0 > 1.1 (apply the latest patch) 1.2 > 1.3

  The bundle 1.0 to 1.1 is deferred. So I think to install a new 1.3 ISE as a virtual appliance and then configure it from there. I have not too clued up on ISE so I was wondering is there a way to backup on ISE 1.0 and 1.3 restoration?

  If this is not the case, what would be the best approach?

  Thank you

  Wow 1.0 to 1.4 is a big leap in functionality. You run this in your production network?

  Authentication and authorization should continue to work that you have configured the.

  On the top of my head

  -you come on duty return to the AD domain (if you have joined in the first place). Make sure you have the credentials of the service account to do.

  -Comments and other portals have been completely redesigned. If you have made any customizations, you're probably better it demolition and reconstruction by using the new tools of the portal generator.

  -Depending on whether you have advanced Base 1.0 licenses will take you through basic or Apex with 1.3 / 1.4.

  -ISE has a ton of other features that may or may not apply in your environment.

• Cisco ise HA requeriments on hardware or software

  Hi my name ia Ivan

  I would like to know if possible to make a table in HA primary and replica uses two different Cisco ISE, in software y hardware

  example: virtual device in HA with ISe ise

  or two ISE with different reference numbers.

  y at - it all requeriment do a software HA o?

  concerning

  Ivan.

  Ivan,

  You can mix appliances material ISE and virtual machines in a deployment. As long as your servers each have required or equivalent material resources VM (space disk and IO, CPU, memory) for the type of node, it is not a problem that they are of different types of hardware or platform (physics and VM).

  They must be running the same release and patch level exact ISE.

• Authentication (Windows Server 2013) AD Cisco ISE problem

  Background:

  Has deployed two Cisco ISE 1.1.3. ISE will be used to authenticate users wireless access admin WLC and switches. Database backend is Microsoft running on Windows Server 2012 AD. Existing Cisco ACS 4.2 still running and authenticate users. There are two Cisco WLCs version 7.2.111.3.

  Wireless users authenticates to AD, through works of GBA 4.2. Access admin WLC and switches to the announcement through ISE works. Authentication with PEAP-MSCHAPv2 access and admin PAP/ASCII wireless.

  Problem:

  Wireless users cannot authenticate to the announcement through ISE. This is the error message '11051 RADIUS packet contains invalid state attribute' & '24444 Active Directory failed because of an error that is not specified in the ISE'.

  

  Conducted a detailed test of the AD of the ISE. The test was a success and the result seems fine except for the below:

  xxdc01.XX.com (10.21.3.1)

  Ping: 0 Mins Ago

  Status: down

  xxdc02.XX.com (10.21.3.2)

  Ping: 0 Mins Ago

  Status: down

  xxdc01.XX.com

  Last success: Thu Jan 1 10:00 1970

  March 11 failure: read 11:18:04 2013

  Success: 0

  Chess: 11006

  xxdc02.XX.com

  Last success: Fri Mar 11 09:43:31 2013

  March 11 failure: read 11:18:04 2013

  Success: 25

  Chess: 11006

  Domain controller: xxdc02.xx.com:389

  Domain controller type: unknown functional level DC: 5

  Domain name: xx.COM

  IsGlobalCatalogReady: TRUE

  DomainFunctionality: 2 = (DS_BEHAVIOR_WIN2003)

  ForestFunctionality: 2 = (DS_BEHAVIOR_WIN2003)

  Action taken:

  Log Cisco ISE and WLC by using the credentials of the AD. This excludes the connection AD, clock and AAA shared secret as the problem.

  (2) wireless authentication tested using EAP-FAST, but same problem occurs.

  (3) detailed error message shows below. This excludes any authentication and authorization policies. Even before hitting the authentication policy, the AD search fails.

  12304 extract EAP-response containing PEAP stimulus / response

  11808 extracted EAP-response containing EAP - MSCHAP VERSION challenge response to the internal method and accepting of EAP - MSCHAP VERSION such as negotiated

  Evaluate the politics of identity

  15006 set default mapping rule

  15013 selected identity Store - AD1

  24430 Authenticating user in Active Directory

  24444 active Directory operation failed because of an error that is not specified in the ISE

  (4) enabled the registration of debugging AD and had a look at the logging. Nothing significant, and no clue about the problem.

  (5) wireless tested on different mobile phones with the same error and laptos

  (6) delete and add new customer/features of AAA Cisco ISE and WLC

  (7) ISE services restarted

  (8) join domain on Cisco ISE

  (9) notes of verified version of ISE 1.1.3 and WLC 7.2.111.3 for any open caveats. Find anything related to this problem.

  10) there are two ISE and two deployed WLC. Tested a different combination of ISE1 to WLC1, ISE1 to WLC2, etc. This excludes a hardware problem of WLC.

  Other possibilities/action:

  1) test it on another version WLC. Will have to wait for approval of the failure to upgrade the WLC software.

  (2) incompatibility between Cisco ISE and AD running on Microsoft Windows Server 2012

  Did he experienced something similar to have ideas on why what is happening?

  Thank you.

  Update:

  (1) built an another Cisco ISE 1.1.3 sever in another data center that uses the same domain but other domain controller. Thai domain controller running Windows Server 2008. This work and successful authentication.

  (2) my colleague tested in a lab environment Cisco ISE 1.1.2 with Windows Server 2012. He has had the same problem as described.

  This leads me to think that there is a compatibility issue of Cisco ISE with Windows Server 2012.

  
  

  
  

  Yes, it seems that 1.1.3 doesn't support Server 2012 as of yet.

  External identity Source OS/Version

  Microsoft Windows Active Directory 2003 R2 32-bit and 64-bit

  Active Directory Microsoft Windows 2008 32-bit and 64-bit

  Microsoft Windows Active Directory 2008 R2 64-bit only

  Microsoft Windows Active Directory 2003 32-bit only

  http://www.Cisco.com/en/us/docs/security/ISE/1.1/compatibility/ise_sdt.PDF

• Cisco ISE Patch 1.3 6 procedure

  Hi team,

  Please help me with the installation of fix on Cisco ISE version 1.3.0.876. I intend to patch our ISE with HA Set - up for patch 6. There also a way to upgrade? I read that you must install the hotfix on the primary node, then the secondary node automatically update to patch 6. Which command will work for me to check that the secondary image is upgraded to patch 6. Also, how much time it take to restart the application.

  Thanks in advance!

  Kind regards

  Mady

  Hi Mady-

  You can perform the installation, restore and check the status of the patch directly from the graphical interface on the head node to Admin. You can reference to ISE 1.3 Administrator's Guide:

  Install the Patch:

  http://www.Cisco.com/c/en/us/TD/docs/security/ISE/1-3/admin_guide/b_ise_admin_guide_13/b_ise_admin_guide_sample_chapter_0101.html#ID202

  Check the status of the patch:

  http://www.Cisco.com/c/en/us/TD/docs/security/ISE/1-3/admin_guide/b_ise_admin_guide_13/b_ise_admin_guide_sample_chapter_0101.html#ID325

  I hope this helps even if end :)

  Thank you for evaluating useful messages!

• Upgrade the processor and the memory of SX280

  Hello

  I have OptiPlex SX280 bought 3 years ago

  which has Intel Pentium 4 530 memory and 2 GB.

  Given that I need to solve a problem of Supercomputing,

  I want to upgrade the processor and the memory instead of replace the computer.

  SX280 works with CPU Core2Duo E8200 having the same type of brooch (LGA775)

  and 4GByte momory?

  The SX280 BIOS is A09.

  Hope to hear a response.

  Thanks in advance.

  Message edited by yongminc on 10/19/2008 21:18
  
  

• CPU/memory of the ESXi host totally access & usage and temp CPU with PowerCLI.

  Dear all,

  I am struggling with the CPU/memory reading of the host completely & information about the use of PowerCLI and the temperature of the CPU is also very useful for me. I used "Get-VMHost-name" to get VMHost to object, but cannot get its properties such as CpuTotalMhz, CpuUsageMhz, MemoryTotalMB, MemoryUsageMB.

  And also do not know which object has temporary information of the CPU. Thank you!

  You probably have a fairly old PowerCLI version (4.0).

  We'll see if the upgrade solves a number of these problems.

• Given the 10.5.8 to 10.6 Snow Leopard upgrade.  Meet the Intel/memory minimum requirments.  After a full backup of course.  Anything I should be aware of before trying this?  Possible to the functions/effects?  Due to browser problems

  Given the 10.5.8 to 10.6 Snow Leopard upgrade.  Meet the Intel/memory minimum requirments.  After a full backup of course.  Anything I should be aware of before trying this?  Possible to the functions/effects?  My data (mp3, photos, documents, etc.) will not be affected?  I also have Windows for Mac.  It will not be affected?  Recent browser performance is untenable in weeks.  Safari 5.0.6.  Now even my Firefox is fact-zo.  Process seems simple enough, but thought I would ask a preview as many reviews on here seem to go anyway in regard to recommend it.  Thought that I have gathered a few comments before the trigger (or not) thank you to all those wh

  Just to start with this one:

  I also have Windows for Mac.

  I assume you mean that you run Windows in a virtual machine such as Parallels? If so, the machine virtual peut must be updated.

  When you install Snow Leopard, make sure to choose the option to do a custom install, so you can select the check box for Rosetta, or it will not install and PowerPC applications will not run. Not a huge deal if you miss. The first time you try to run a PPC application if Rosetta has not been installed, OS X offers to download and install it for you.

  Firefox works under Snow Leopard, which is the oldest version of OS X Mozilla always supports. Safari installed with SL will remain grossly outdated and should not be used.

  Nothing will happen to your documents, although I can't say with certainty that all the apps from third party that allows you to open will not be updated. They can. They cannot. For example, Office 2004 will run as long as Rosetta is installed.

• I upgraded my card mother cpu ram and hard drive. I reinstalled windows xp home edition has got all of the updates. After 9 latest updates download and installtion went well, I restarted the computer, I get a blue screen and the computer restarts

  I upgraded my card mother cpu ram and hard drive. I reinstalled windows xp home edition has got all of the updates. After 9 latest updates download and installtion was going well until I rebooted the computer and go to page window showing all the icons that I get a blue screen and the computer restarts its self and does not stop. How can this be corrected?

  Hi KevinRy,

  Welcome to the Microsoft Answers site!

  Unplug all external devices.

  Try to start in safe mode. If you can start in safe mode, and then do a system restore to restore the computer to an earlier point in time.

  Change the recovery settings to disable automatic reboot, if you are able to boot up to the desktop computer:

  1.	Right-click my computerand then click Properties.
  2.	Click the Advanced tab.
  3.	Under Startup and recovery, click settings to open the Startup and recovery dialog box.
  4.	Clear the automatically restart check box, and then click OK many times necessary.
  5.	Restart your computer so that the settings take effect.

  Now, when you are going to close and a fatal error occurs, you will see at least and it won't cause an automatic restart.

  Please reply back with the error message you get because it helps us to resolve the error.

  Kind regards
  Amal-Microsoft Support.
  Visit our Microsoft answers feedback Forum and let us know what you think.

• How is collected JVM parameters (CPU, memory, etc...)

  I read a lot of documents, and I'm still a little confused about how it works. How are the CPU, memory, etc. of the measurements taken on the JAVA virtual machine. Is there on the thresholds of the box set up and if so where can I find it. I don't know if I'm wrong or not, but on a system Linux, OS-Linux_System agent collect this data?

  JVM parameters are collected by the Java or JMX agents using JMX, both agents use this JVM mechanism to collect processor memory and thread information. Monitoring of the OS is usually collected by agents of the BONE (os-linux_system is inherited, Infrastructure Officer is the new mechanisms). The threasholds are set out of the box like registry variables (you can see their names included in the rules).

  Golan

• Cisco ise license command

  I have a question

  1. is it possible to install the Cisco ISE software on the server machine to physical HP (without solution VMware or without the use of SNS-3415-k9 cisco device)?

  2. for 2500 users online, I'll order L-ISE-BSE-2550, L-ISE-PLS-S-2500 and L-ISE-APX-S-2500 of basis, more and apex licenses. My question is HA (primary and secondary) application I need 2 licenses for each? (2 * L - ISE - BSE - 2550, 2 * L - ISE - PLS - S - 2500 and 2 * L - ISE - APX - S - 2500)

  or just a license for each is enough?

  3. If I implement Cisco ISE and HA on VMware environment, can I 2 L-ISE-VM-K9 licenses for each VM machines? and also I need 2 licenses for each basic, plus, and at the apex?

  4. What is smart net Cisco and Cisco SASU? need to buy these for support and ticketing system?

  5. What is license for cisco anyconnect (L-AC-APX-1 year-G)?

  thnx in adv.

  You can install ISE on a HP ONLY Server if you are using software virtualization (VMware or KVM).

  The Guide of Installation of ISE sets out three options:

  1 hardware appliance from cisco SNS

  2. virtual machine VMware

  3 Linux KVM.

  The AnyConnect license is required to qualify with the features of the Apex. It is not installed on the ISE server, however.

• Cisco ISE with GANYMEDE + and RADIUS both?

  Hello

  I'm wired opening of authentication on a network using Cisco ISE. I studied the conditions for this. I know that I need to enable the RADIUS on the Cisco switches on the network. The switches in the network are already programmed to GANYMEDE +. Anyone know if they can both operate on the same network at the same time?

  Bob

  I suppose that Ganymede is configured (with ACS 4.x or 5.x) for the peripheral administration via telnet/ssh, and now you need the RADIUS (radius) to authenticate 802. 1 x. Yes they can both work on the same network at the same time.

  ~ BR
  Jatin kone

  * Does the rate of useful messages *.

• Cisco ISE 1.1.2.145 Admin authentication via the LDAP protocol

  I have configured the LDAP protocol and able to retrieve our LDAP directory structure. Now, I'm trying to point authentication "Admin Access" Source 'External identity', which is the new LDAP IS I created. But I couldn't find an option to authenticate locally if for some reason the LDAP configuration does not work. I learned that the ISE can automatically return to local auth as external sources Idenitity are inaccessible. How can I test the LDAP authentication with breaking them our Admin Access? I thought to open two parallel sessions, one with Super Admin account Local and one with the domain account. But I noticed that ISE communication is smart enough for the closing session/connection no matter what other sessions in different browsers so, basically, I can't open two parallel sessions the same machine to test. Suggestions? or am I missing something here?

  Thanks in advance.

  Hi Srinivas,

  Even if you configure LDAP as a source of external identity of admin access, you can always internal relief without having locked. According to the ISE user guide:

  During the operation, Cisco ISE is designed to "fall back" and try to perform the internal identity database authentication, if the communication with the external identity store has not been established, or if it fails. In addition, whenever an administrator for which you have configured external authentication launches a browser and initiates a logon session, the administrator must still the option authentication of demand through the local Cisco ISE database by choosing 'Internal' to the Selector drop-down storage of identity in the Connect dialog box.

  http://www.Cisco.com/en/us/docs/security/ISE/1.1/user_guide/ise_man_identities.html#wp1351543

  Please see the attached screenshot by my lab ISE:

  

  I configured the admin authentication against AD, but I still see both 'Internal' and 'AD' at the time of the connection.

  I hope this helps.

  Thank you

  Aastha

• Cisco ISE

  Hi all

  I intend to implement cisco ISE in my network. I have 1000 endpoints and some mobile devices. I plan to use approach distributed and all licenses possible.

  It is: should I buy licenses for all nodes. For example 1000 for the head node, 1000 for high school, 1000 for surveillance and so forth?

  Or should I buy license only 1000 (I mean 1000 base + 1000 advances + 100 mobile) ones and apply them to all nodes?

  Concerning

  Max

  Hi Max.

  ISE is authorized by the deployment. So if you have a distributed with us deployment will tell ISE 10 nodes or servers you will always only the node main Administrator license.

  Now, if you plan to have two deployments (say a deployment for the EMEA region and the other for APAC) then you would need licenses for both deployments (you allow the node primary admin in each deployment).

  I hope this makes sense :)

  Thank you for evaluating useful messages!

• Cisco ISE and Meraki RADIUS

  I am very new to Cisco ISE and Meraki.  I try to get the Radius configuration for wireless authentication.  When I do a test of the Meraki to ISE, it passes.

  When I try to connect from my laptop, I look at the logs of the Radius and it passes; However, it does not connect me to good policy.  I keep hitting the default policy.  I have my Meraki police above the default policy in the strategy defined in article.  I have attached what looks like my strategy game.

  Devices does not really matter. Here is what I see when I create a device group (where you add the access point to this group), and then create the condition:

  networkdevicegroups.PNG

  

  And here is where I create the condition of strategy game and you should be able to select the Meraki access points:

  devicecondition.PNG

  

  This will give you the condition similar to what I posted above. This is perhaps why you aren't hit that is not matching the condition for this game.