topic Re: Change MnT Role in Network Access Control

Change MnT Role

masyamad — Wed, 12 Dec 2018 06:00:37 GMT

When I swap MnT primary/secondary in 2 nodes deployment, usually use role dropdown in deployment nodes menu as follows.

But I notice the operation is not documented in administration guide.

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_new_chapter_011.html#ID95

The guide introduce "To convert the existing secondary node to an active primary node, the administrator must first manually promote the secondary node to a primary role." but doen't mention how to do it. (Is something missed? or documented in other places?)

Now I'm creating ISE operational guide to a specific large customer and want to know official way to change monitoring role from ISE GUI. I'd appreciate if dev team confirm if it's official correct way.

Re: Change MnT Role

Francesco Molino — Wed, 12 Dec 2018 06:33:34 GMT

Hi

The way to promote the secondary monitoring node as primary is to use the drop down menu as you showed on your screenshot.
There's no other way I'm aware of.

Re: Change MnT Role

masyamad — Wed, 12 Dec 2018 07:20:08 GMT

Thanks for the reply. I also think so, but now no official document seems not to mention about the operation. I need Cisco dev team's confirmation if it's officially supported or not.

Re: Change MnT Role

Surendra — Wed, 12 Dec 2018 13:20:52 GMT

Seems like a miss. Please work with TAC to get the document modified.

Re: Change MnT Role

hslai — Mon, 17 Dec 2018 01:50:30 GMT

...

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_new_chapter_011.html#ID95

The guide introduce "To convert the existing secondary node to an active primary node, the administrator must first manually promote the secondary node to a primary role." but doen't mention how to do it. (Is something missed? or documented in other places?)

...

That is talking about ISE admin nodes and documented at Manually Promote Secondary PAN To Primary.

For MNTs, the failover is always automatic so usually no need to switch the roles.

You may either log a bug yourself or use the feedback link to send your suggestions.

Re: Change MnT Role

masyamad — Mon, 17 Dec 2018 02:09:00 GMT

Thanks for the comment! Promote to primary MnT is sometimes required for scheduled report exporting. And also sometime TAC suggest swapping primary/secondary for problem isolation or solution.

The bug has been filed with Surendra approval but your comment is also appreciated.