topic Re: ISE Migration from 4 node to 2 node in Network Access Control

ISE Migration from 4 node to 2 node

Arjun176 — Thu, 11 Jul 2019 09:06:57 GMT

hi,

We have 4 ISE node in the network, PAN and MTN are in 34xx series and PSN are in 35XX series.

We are removing the 34xx series from the network and keep 35xx in the network.

So 35XX which are currently working as PSN will also act a PAN and MTN.

Plan is to migrate the Secondary PAN and MTN 34xx to Secondary 35XX. The configuration should be sync if we enable 35xx and PAN and MTN secondary. Then shut the secondary 34xx device.

Then shutdown the primary PAN 34xx and make secondary 35xx as primary PAN allow the configuration to sync.

Enable the other 35xx as secondary PAN and make the configuration sync from 35xx primary PAN.

Is the above mentioned steps is fine to proceed, Also let me know if we need to copy the certificate and license from the PAN t to 35xx series PSN when we make it as PAN. or it will be automatically sync because it is already in the cluster currently with 4 device.

Re: ISE Migration from 4 node to 2 node

Timothy Abbott — Thu, 11 Jul 2019 14:28:00 GMT

Should be fine but you will need to should back up the certificates and will also have to rehost the license. You should also reference our performance and scale data to ensure that your 2 node deployment will be sufficiently sized.

Regards,
-Tim

Re: ISE Migration from 4 node to 2 node

Arjun176 — Fri, 19 Jul 2019 13:01:55 GMT

hi,

Migration from 3495 to 3595 has been successfully completed and we need not to rehost the license, it is automatically take in the 3595 as it was previous configured as PSN.

Re: ISE Migration from 4 node to 2 node

Jason Kunst — Fri, 19 Jul 2019 20:02:59 GMT

No only the PAN node(s) are registered to a license.

https://community.cisco.com/t5/security-documents/how-do-i-rehost-my-existing-ise-license-s-onto-a-new-or/ta-p/3632248