Expected Behavior on EST Service

Jatin Katyal — Fri, 15 Jun 2018 21:19:13 GMT

hello team,

I'd like to know what should be a status of EST service for P-PAN, S-PAN, PSN and MNT if "Certificate Authority" is enabled for the deployment on the P-PAN. So far I haven't seen any documentation that talks about it. My understanding is, EST and CA services should be running on all the nodes except MNT.

The only way I know to verify this is, root into /opt/CSCOcpm/config/node-config.rc & check whether ENABLE_CA is 0 or 1. If it is 0 and service is DISABLED then its an expected behavior. I'm looking for a better way to understand this as customer doesn't want to enable root access.

For my customer deployment ISE 2.1 ( Toggling the CA service on PAN didn't help)

S-PAN : CA and EST running

P-PAN : CA and EST Disabled.

Regards,

Re: Expected Behavior on EST Service

hslai — Fri, 15 Jun 2018 21:33:34 GMT

I believe it only needed on PSNs, per CSCvi69789. Let's confirm it with the dev team.

topic Expected Behavior on EST Service in Network Access Control

Expected Behavior on EST Service

Re: Expected Behavior on EST Service