×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

File transfer problem during ISE 1.3 upgrade

Answered Question
Nov 14th, 2014
User Badges:

We have problem running the upgrade command:

iseadm01/admin# application upgrade cleanup

Application upgrade preparation directory cleanup successful
iseadm01/admin# application upgrade prepare ise-upgradebundle-1.2.x-to-1.3.0.876.x86_64.tar.gz FTP

Getting bundle to local machine...
% File transfer error
iseadm01/admin#

The sniffertrace shows that the ISE 1.2 is sending TCP RST after about 30MB file transfer. If we run the command serveral times, it stops exactly after the same amount of transferred bytes.

 

The disk utilazation looks OK:

iseadm01/admin# dir

Directory of disk:/

      16384 Sep 18 2014 15:55:48  lost+found/

           Usage for disk: filesystem
                  172761088 bytes total used
                14275047424 bytes free
                15234142208 bytes available
iseadm01/admin#
iseadm01/admin# dir

Directory of disk:/

      16384 Sep 18 2014 15:55:48  lost+found/

           Usage for disk: filesystem
                  172761088 bytes total used
                14275047424 bytes free
                15234142208 bytes available
iseadm01/admin#

We have Another ISE (monitor node) and the problem is excact the same on that node.

 

Thanks

 

Correct Answer by Marvin Rhoads about 2 years 9 months ago

I've upgraded two deployments now - one on VMs and another on ISE 3400 series appliances. Both transferred the images OK.

I found it easier to transfer the files separately via FTP.  I then created a repository pointing at the disk and referenced that in the upgrade command.

I have seen reports of ftp servers on Windows (with WS-FTP and/or IIS) limiting transfers to 30 MB.  I used the Filezilla ftp server on windows laptop and it worked very nicely.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4.5 (2 ratings)
Loading.
Correct Answer
Marvin Rhoads Fri, 11/14/2014 - 08:23
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,
  • Cisco Designated VIP,

    2017 Firewalling, Network Management, VPN

I've upgraded two deployments now - one on VMs and another on ISE 3400 series appliances. Both transferred the images OK.

I found it easier to transfer the files separately via FTP.  I then created a repository pointing at the disk and referenced that in the upgrade command.

I have seen reports of ftp servers on Windows (with WS-FTP and/or IIS) limiting transfers to 30 MB.  I used the Filezilla ftp server on windows laptop and it worked very nicely.

r.westman Fri, 11/14/2014 - 10:25
User Badges:

Thanks for your input. We tried our Prime 2.1 as the FTP server and then it worked like a charm.

 

Thanks again for your help

Dante Verastegu... Sun, 12/07/2014 - 20:10
User Badges:

Hi!

One question, Im trying to use FTP to transfer the upgrade file to the ISE server since when i use TFTP it doesnt work. It sends almost all the file and then the connection drops.

However, using FTP, how do i set up Filezilla? Whenever i try to connect to ISE it doesnt connect.

Also on ISE, via CLI, it doesnt allow me to create an FTP user.

Id appreciate your help!

Sincerely,

Dante

Marvin Rhoads Sun, 12/07/2014 - 20:23
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,
  • Cisco Designated VIP,

    2017 Firewalling, Network Management, VPN

Dante Verastegu... Sun, 12/07/2014 - 20:28
User Badges:

Marvin,

Thank you for getting back to me.

Im new to Filezilla, where can i find out my user/password that is defined?

I appreciate your help

Regards

Marvin Rhoads Mon, 12/08/2014 - 04:30
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,
  • Cisco Designated VIP,

    2017 Firewalling, Network Management, VPN

On FileZila click on the User Accounts Icon. The dialog box will show you  defined users. By default only anonymous is created.

So you need to create a local ftp username and passowrd. Then assign it a home directory under shared folders. This will be the dfault location a remote clietn will look for files and where you would find the ISE upgrade package, for example.

See following screenshot....


Dante Verastegu... Mon, 12/08/2014 - 15:19
User Badges:

Hi Marvin,

I created the username and password and the directory assigned to it.

However, the server IP address is the local network IP add? or would it be my interface connected to the ISE?

I access the ISE via VPN. 

When i try to run the copy command, it shows me the same error. Transfer failed.

Marvin Rhoads Mon, 12/08/2014 - 19:24
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,
  • Cisco Designated VIP,

    2017 Firewalling, Network Management, VPN

Your VPN-connected PC will have an IP address assigned to it from the VPN pool at the headend gateway. That would be the address you use when initiating the ftp copy of the upgrade bundle from the ISE server.

Dante Verastegu... Mon, 12/08/2014 - 19:33
User Badges:

Marvin,

Somehow it doesnt work with the IP Address provided by the VPN pool.

It works with my local address and my external address.

It opens the connection and I can see it on Filezilla but for some reason, it times out and the connection closes.

Do you have an idea why is that?

Im attaching an screenshot of what is happening

I appreciate your help!

 

Attachment: 
Marvin Rhoads Mon, 12/08/2014 - 19:36
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,
  • Cisco Designated VIP,

    2017 Firewalling, Network Management, VPN

Hmm. Make sure your firewall is allowing / inspecting ftp. That could cause this problem. On an ASA we would look for the "inspect ftp" command as part of the global service-policy.

Actions

This Discussion