topic If you go to the External in Network Access Control

ISE 2.1 + Secondary Node

Matteo Abrile — Mon, 11 Mar 2019 07:30:25 GMT

Hello,

I add to deploy additonal node and it sync fine with primary, Now on WLC I add as radius server also IP secondary node.
Now sometime when I doing BYOD onboarding and request sent to secondary node, I receive back invalid user/pass, to authenticate username I use my AD in external identity. If I disable in WLC secondary node every things work fine again.
Seems that secondary node can't speak with AD to process authentication.

Can you have some idea ? thanks

If you go to the External

Rahul Govindan — Wed, 01 Mar 2017 00:34:24 GMT

If you go to the External Identity Source page, do you see the secondary node as joined to the Active directory? If not, you can try running the inbuilt diagnostic tool to troubleshoot why the secondary PSN is not talking to the AD correctly.

http://www.cisco.com/c/en/us/td/docs/security/ise/1-3/ISE-ADIntegrationDoc/b_ISE-ADIntegration.html#task_013E23768CF044F08C0DAF93902F5D0D

Hello,

Matteo Abrile — Wed, 01 Mar 2017 16:26:28 GMT

Hello,

it's work now, thanks very much.