topic Re: Primary PxGird Node Selection in Network Access Control

Primary PxGird Node Selection

Abhishek Pakrashi — Thu, 01 Nov 2018 01:34:47 GMT

How to identify which PxGrid node will be the primary.
I understand that by failover, an intended node can be made Primary, but the User guide states: At times, the original primary pxGrid node might be automatically promoted back to the primary role.
So, how can we be sure that the certain node will be primary.

UserGuide URL:https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_new_chapter_011.html#concept_FA33C4F07E274E7F9F2F3D33A9C2C0F0

Re: Primary PxGird Node Selection

hslai — Thu, 01 Nov 2018 02:37:46 GMT

In that chapter, it says,

Note

If pxGrid service is disabled on a node, port 5222 will be down, but port 8910 (used by Web Clients) will be functional and will continue to respond to the requests.

pxGrid version 1 is active/standby so the active pxGrid will accept connections to TCP 5222 whereas the standby not. pxGrid version 2 is active/active and using TCP 8910.

Thus, we may check TCP 5222 availability to determine the active pxGrid v1 node.