Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

File transfer problem during ISE 1.3 upgrade

We have problem running the upgrade command:

iseadm01/admin# application upgrade cleanup

Application upgrade preparation directory cleanup successful
iseadm01/admin# application upgrade prepare ise-upgradebundle-1.2.x-to-1.3.0.876.x86_64.tar.gz FTP

Getting bundle to local machine...
% File transfer error
iseadm01/admin#

The sniffertrace shows that the ISE 1.2 is sending TCP RST after about 30MB file transfer. If we run the command serveral times, it stops exactly after the same amount of transferred bytes.

 

The disk utilazation looks OK:

iseadm01/admin# dir

Directory of disk:/

      16384 Sep 18 2014 15:55:48  lost+found/

           Usage for disk: filesystem
                  172761088 bytes total used
                14275047424 bytes free
                15234142208 bytes available
iseadm01/admin#
iseadm01/admin# dir

Directory of disk:/

      16384 Sep 18 2014 15:55:48  lost+found/

           Usage for disk: filesystem
                  172761088 bytes total used
                14275047424 bytes free
                15234142208 bytes available
iseadm01/admin#

We have Another ISE (monitor node) and the problem is excact the same on that node.

 

Thanks

 

1 ACCEPTED SOLUTION

Accepted Solutions
Hall of Fame Super Silver

I've upgraded two deployments

I've upgraded two deployments now - one on VMs and another on ISE 3400 series appliances. Both transferred the images OK.

I found it easier to transfer the files separately via FTP.  I then created a repository pointing at the disk and referenced that in the upgrade command.

I have seen reports of ftp servers on Windows (with WS-FTP and/or IIS) limiting transfers to 30 MB.  I used the Filezilla ftp server on windows laptop and it worked very nicely.

11 REPLIES
Hall of Fame Super Silver

I've upgraded two deployments

I've upgraded two deployments now - one on VMs and another on ISE 3400 series appliances. Both transferred the images OK.

I found it easier to transfer the files separately via FTP.  I then created a repository pointing at the disk and referenced that in the upgrade command.

I have seen reports of ftp servers on Windows (with WS-FTP and/or IIS) limiting transfers to 30 MB.  I used the Filezilla ftp server on windows laptop and it worked very nicely.

Community Member

Thanks for your input. We

Thanks for your input. We tried our Prime 2.1 as the FTP server and then it worked like a charm.

 

Thanks again for your help

Community Member

Hi!One question, Im trying to

Hi!

One question, Im trying to use FTP to transfer the upgrade file to the ISE server since when i use TFTP it doesnt work. It sends almost all the file and then the connection drops.

However, using FTP, how do i set up Filezilla? Whenever i try to connect to ISE it doesnt connect.

Also on ISE, via CLI, it doesnt allow me to create an FTP user.

Id appreciate your help!

Sincerely,

Dante

Hall of Fame Super Silver

The user account is on your

The user account is on your FileZilla server - there's no need to create one on ISE. On ISE you provide username and password defined on the ftp server when you initiate the copy. I.e.:

 

copy ftp://username:password@ftpserverIP:/<upgrade file name> disk:/

Community Member

Marvin,Thank you for getting

Marvin,

Thank you for getting back to me.

Im new to Filezilla, where can i find out my user/password that is defined?

I appreciate your help

Regards

Hall of Fame Super Silver

On FileZila click on the User

On FileZila click on the User Accounts Icon. The dialog box will show you  defined users. By default only anonymous is created.

So you need to create a local ftp username and passowrd. Then assign it a home directory under shared folders. This will be the dfault location a remote clietn will look for files and where you would find the ISE upgrade package, for example.

See following screenshot....

Community Member

Hi Marvin,I created the

Hi Marvin,

I created the username and password and the directory assigned to it.

However, the server IP address is the local network IP add? or would it be my interface connected to the ISE?

I access the ISE via VPN. 

When i try to run the copy command, it shows me the same error. Transfer failed.

Hall of Fame Super Silver

Your VPN-connected PC will

Your VPN-connected PC will have an IP address assigned to it from the VPN pool at the headend gateway. That would be the address you use when initiating the ftp copy of the upgrade bundle from the ISE server.

Community Member

Marvin,Somehow it doesnt work

Marvin,

Somehow it doesnt work with the IP Address provided by the VPN pool.

It works with my local address and my external address.

It opens the connection and I can see it on Filezilla but for some reason, it times out and the connection closes.

Do you have an idea why is that?

Im attaching an screenshot of what is happening

I appreciate your help!

 

Hall of Fame Super Silver

Hmm. Make sure your firewall

Hmm. Make sure your firewall is allowing / inspecting ftp. That could cause this problem. On an ASA we would look for the "inspect ftp" command as part of the global service-policy.

Community Member

Ok.Ill see if I can speak

Ok.

Ill see if I can speak with the network admins.

Thank you!

2329
Views
4
Helpful
11
Replies
CreatePlease to create content