topic Re: Best way or correct way to reload 2 ise nodes (pan/mnt) in Network Access Control

Best way or correct way to reload 2 ise nodes (pan/mnt)

ade5 — Mon, 04 Mar 2019 04:54:13 GMT

Hello everyone

I need to reload two ise nodes due to a bug that caused licensing consumption page to show zero. ise1 primary(pan/mnt) and ise2 Secondary(pan/mnt). I have 4 psn nodes and they should stay up. I need to ensure no downtime. I know I have to do both config and operational backup first.

option1

send reload command to secondary node first and wait for it to come back up then reload primary

option2

promote secondary to primary then reload ise1 and when ise1 comes back up switch ise2 back to secondary

please let me know if those options are valid and which is best or if there are other options. Thank you!

Re: Best way or correct way to reload 2 ise nodes (pan/mnt)

mnagired — Mon, 04 Mar 2019 05:50:40 GMT

Hi,

Dont see much difference between Option 1 or 2.. with Option 2 you can get back to same state(ISE1- Primary and ISE2- Secondary)..

Yes, Make sure you perform a configuration and operational backup and use application stop ise & Halt CLI to Shutdown ISE instances and reduce any database corruption..

Regards

Mahesh

Re: Best way or correct way to reload 2 ise nodes (pan/mnt)

Damien Miller — Mon, 04 Mar 2019 08:12:03 GMT

Just reload them as in option 1. If you do option 2 you have double the reloads, when you promote a node to primary it reloads again.

If you read this section of the admin guide you can see what services will be unavailable while the Primary PAN reloads. Reloading the PAN is a common task, no need to over think it.
https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_new_chapter_011.html#ID59

Re: Best way or correct way to reload 2 ise nodes (pan/mnt)

ade5 — Tue, 05 Mar 2019 01:29:06 GMT

"Yes, Make sure you perform a configuration and operational backup and use application stop ise & Halt CLI to Shutdown ISE instances and reduce any database corruption"

thank you. Are you saying its better to shut it down rather than sending the command "reload"?

Re: Best way or correct way to reload 2 ise nodes (pan/mnt)

ade5 — Tue, 05 Mar 2019 01:32:35 GMT

thank you Damien.

Re: Best way or correct way to reload 2 ise nodes (pan/mnt)

Alex Pfeil — Tue, 08 Dec 2020 11:43:16 GMT

This is exactly what I was looking for.

Thanks!