topic Re: DNAC and ISE integration assistance in Cisco Catalyst Center

DNAC and ISE integration assistance

angelest — Sat, 06 Mar 2021 03:51:55 GMT

I'm setting up our DNAC lab. We are trying to integrate ISE into DNAC but we hit some issue that we cant figure out why.

DNAC version 1.3.1.0

ISE version 2.7.0.356 (VM)

Issue:

@ISE:

ISE is active on DNAC (LAB_DNAC) on ISE under PXgrid it creates 2 new entries as below

lab_dnac_ndp shows online

lab_dnac shows offline (Capabilities(0 Pub, 0 Sub) )

@DNAC:

Shows both Primary and PXgrid available.

Also not seeing any SGT's into our DNAC.

I'm a newbie in DNAC thus appreciate any help.

Re: DNAC and ISE integration assistance

Damien Miller — Sat, 06 Mar 2021 05:39:24 GMT

I would recommend upgrading your DNAC, but take a look at the "web clients" tab of the ISE pxgrid page. DNAC uses pxg v2 as you pointed out, xmpp is actually for pxg v1. I looked in my lab and the pxg v1 xmpp client entries for dnac is also offline for me, but the web client is "on". My lab is working as expected.

Re: DNAC and ISE integration assistance

angelest — Mon, 08 Mar 2021 02:29:46 GMT

Hi Damien,

Appreciate your help. I dont see any web entry in Web Clients under PXgrid. WIll try to upgrade DNAC to 1.3.3.9 and patch ISE to patch 2 of version 2.7

Re: DNAC and ISE integration assistance

angelest — Tue, 09 Mar 2021 04:10:42 GMT

Hi Damien,

I upgraded DNAC to Version 1.3.3.9 and ISE to 2.7.0.356 patch 3.

I can see SGT groups and policies becomes synchronize to ISE when I created this at DNAC.

Just want to confirm since in ISE still it shows offline. Is this an expected behavior?

Thanks and appreciate your help.

Re: DNAC and ISE integration assistance

Mike.Cifelli — Wed, 10 Mar 2021 13:49:16 GMT

I am currently running a 2.1.2.5 cluster in a production environment & I have the same scenario. As @Damien Miller mentioned, as long as your web client appears as ON you should have no issues with sharing data between ISE/DNAC via the pxv2 connection. To speak to your question, this is expected behavior AFAIK. Not 100% sure if Cisco has it roadmapped to remove the pxv1 subscribers to aide in eliminating confusion. HTH!

Re: DNAC and ISE integration assistance

angelest — Thu, 11 Mar 2021 02:14:04 GMT

Thank you