topic NODE-NOT-REACHABLE on ISE in Network Access Control

NODE-NOT-REACHABLE on ISE

Kashish_Patel — Mon, 11 Mar 2019 03:10:43 GMT

Primary ISE node (Serving Admin and Monitor personas) is showing two of the PSNs as "NODE-NOT-REACHABLE" under Replication Status on Deployment page on GUI. It can ping the PSNs and PSNs are actually registered to the Primary admin/monitor node. How can I fix this?

Thanks,

Kashish

NODE-NOT-REACHABLE on ISE

Tarik Admani — Sun, 10 Mar 2013 20:31:56 GMT

How does DNS look when resolving all the hosts. Download a support bundle from the administration node and check the ise-psc.log files.

Thanks,

Tarik Admani
*Please rate helpful posts*

NODE-NOT-REACHABLE on ISE

nspasov — Mon, 11 Mar 2013 03:40:17 GMT

In addition to Tarik's recommendation, can you also tell us if you have a firewall(s) between the different nodes? If yes, do you have the appropriate ports opened?

NODE-NOT-REACHABLE on ISE

Kashish_Patel — Mon, 11 Mar 2013 05:27:49 GMT

Neno,

There is no firewall in between. This was working fine all this while and was observed only recently. The effect of this is that a config change done on primary admin/monitor node is not getting reflected on the PSNs.

Thanks,

Ritika

NODE-NOT-REACHABLE on ISE

Venkatesh Attuluri — Mon, 24 Jun 2013 13:24:19 GMT

For out of sync issues, which most likely are due to time changes or NTP sync

issues, you must correct the system time and perform a manual sync up through

the UI.

• For certificate expiry issues, you must install a valid certificate and perform a

manual sync up through the UI.

• For a node that has been down for more than six hours, you must restart the node,

check for connectivity issues, and perform a manual sync up through the UI

NODE-NOT-REACHABLE on ISE

Tarik Admani — Mon, 24 Jun 2013 14:07:34 GMT

kashish,

What version are you currently on, I am seeing this behavior on an ise 1.1.4 environment after doing failover testing.

Tarik Admani
*Please rate helpful posts*

NODE-NOT-REACHABLE on ISE

Kashish_Patel — Mon, 24 Jun 2013 15:56:15 GMT

Not 1.1.4..I think we saw this on 1.1.1.xxx

NODE-NOT-REACHABLE on ISE

myanznki — Fri, 05 Jul 2013 07:38:59 GMT

have you try de-register and then register again ??

Re:NODE-NOT-REACHABLE on ISE

Tarik Admani — Sat, 06 Jul 2013 23:56:12 GMT

Hi,

I found the issue on ny network and it was due to a different dns record.

Simple way to check is issuing a dns lookup from admin node cli of the problem node. Then repeat from problem node attempting to resolve admin node.

Then if that looks good you can issue the command on both nodes...

Show logging application ise tail,

That output should give you a listing of the nodes in the ise deployment and the ip addresses of each node.

Thanks.

Sent from Cisco Technical Support Android App

Re: NODE-NOT-REACHABLE on ISE

oa476220 — Fri, 22 Aug 2025 20:51:07 GMT

Tell me the solution