topic Re: ISE 2.4 Primary Admin Node Restore in Network Access Control

ISE 2.4 Primary Admin Node Restore

dm2020 — Thu, 12 Dec 2019 18:53:42 GMT

Hi All,

Quick question hopefully. In a distributed ISE 2.4 deployment with primary and secondary Admin nodes, MnT nodes etc, if the primary Admin node fails, can we simply promote the secondary admin node to primary, rebuild the failed admin node, join it back to the cluster and then promote back to primary? Is there are need to complete a full restore in this scenario?

Thanks

Re: ISE 2.4 Primary Admin Node Restore

Damien Miller — Thu, 12 Dec 2019 19:38:32 GMT

Correct, no need to perform a backup/restore operation if you still have a working admin node. So your process is correct, promoting your secondary to primary and joining a fresh node as secondary admin will work. One extra step before joining a new PAN is that you will have to "deregister" the failed admin node from the deployment view first, but this only takes a couple minutes and the node doesn't have to be available to complete.

Re: ISE 2.4 Primary Admin Node Restore

dm2020 — Thu, 12 Dec 2019 21:48:47 GMT

Thats great, thanks for confirming Damien