安全讨论区中的主题 ISE主备切换问题

ISE主备切换问题

jianyan01 — Mon, 15 Jul 2019 07:29:53 GMT

我这边有两台ISE一主一备，需要做切换演练，主机宕机后备机接管业务。问题是主机起来后能抢占主吗？还是说需要手工切换？谢谢！

ISE主备切换问题

Terence.Jh — Tue, 16 Jul 2019 01:59:52 GMT

不能抢占，手动切换

ISE主备切换问题

Yuan Li — Mon, 15 Jul 2019 07:29:54 GMT

Configure Monitoring Nodes for Automatic Failover
If you have two Monitoring nodes in a deployment, you can configure a primary-secondary pair for automatic failover to avoid downtime in the Cisco ISE Monitoring service. A primary-secondary pair ensures that a secondary Monitoring node automatically provides monitoring should the primary node fail.
Before you begin
Before you can configure Monitoring nodes for automatic failover, they must be registered as Cisco ISE nodes.
Configure monitoring roles and services on both nodes and name them for their primary and secondary roles, as appropriate.
Configure repositories for backup and data purging on both the primary and secondary Monitoring nodes. For the backup and purging features to work properly, use the same repositories for both the nodes. Purging takes place on both the primary and secondary nodes of a redundant pair. For example, if the primary Monitoring node uses two repositories for backup and purging, you must specify the same repositories for the secondary node.
Configure a data repository for a Monitoring node using the repository command in the system CLI.
Caution
For scheduled backup and purge to work properly on the nodes of a Monitoring redundant pair, configure the same repository, or repositories, on both the primary and secondary nodes using the CLI. The repositories are not automatically synced between the two nodes.
From the Cisco ISE dashboard, verify that the Monitoring nodes are ready. The System Summary dashlet shows the Monitoring nodes with a green check mark to the left when their services are ready.
Procedure
Step 1
Choose Administration > System > Deployment.
Step 2
In the Deployment Nodes page, check the check box next to the Monitoring node that you want to specify as active, and click Edit .
Step 3
Click the General Settings tab and choose Primary from the Role drop-down list.
When you choose a Monitoring node as primary, the other Monitoring node automatically becomes secondary. In the case of a standalone deployment, primary and secondary role configuration is disabled.
Step 4
Click Save . The active and standby nodes restart.

ISE主备切换问题

Yuan Li — Tue, 16 Jul 2019 02:28:55 GMT

When a primary Monitoring node goes down, the secondary Monitoring node takes over all monitoring and troubleshooting information.
To manually convert the secondary monitoring node to a primary node, promote the secondary node to a primary role. If the primary node comes back up after the secondary node was promoted, it takes the secondary role. If the secondary node was not promoted, the primary Monitoring node resumes the primary role, after it comes back up.
Caution
When the primary node comes back up after a failover, obtain a backup of the secondary and restore the data to update the primary node.

ISE主备切换问题

jianyan01 — Wed, 17 Jul 2019 02:18:10 GMT

YuanLi6689071 发表于 2019-7-16 10:28
When a primary Monitoring node goes down, the secondary Monitoring node takes over all monitoring an ...

你好，这是在哪找到的，我在思科官网找了好久

ISE主备切换问题

jianyan01 — Wed, 17 Jul 2019 02:18:59 GMT

terence 发表于 2019-7-16 09:59
不能抢占，手动切换

谢谢，终于知道了。。。。

ISE主备切换问题

Terence.Jh — Wed, 17 Jul 2019 02:49:03 GMT

jianyan01 发表于 2019-7-17 10:18
谢谢，终于知道了。。。。

= = 好惨，，，，明明回答对了却不是最佳答案

ISE主备切换问题

jianyan01 — Wed, 17 Jul 2019 03:20:02 GMT

terence 发表于 2019-7-17 10:49
= = 好惨，，，，明明回答对了却不是最佳答案

下次给你最佳，非常感谢

ISE主备切换问题

Yuan Li — Wed, 17 Jul 2019 08:00:11 GMT

jianyan01 发表于 2019-7-17 10:18
你好，这是在哪找到的，我在思科官网找了好久

您好，关于failover，请参考https://www.cisco.com/c/en/us/td/docs/security/ise/2-0/admin_guide/b_ise_admin_guide_20/b_ise_admin_guide_20_chapter_010.html