topic Re: Unable to re-integrate Cisco ISE with DNA-C in Network Access Control

Unable to re-integrate Cisco ISE with DNA-C

csco10836880 — Wed, 11 Apr 2018 07:30:33 GMT

Hi all,

I'm following the instructions outlined by this page to perform Cisco ISE integration with DNA-C: Cisco Digital Network Architecture Center Appliance Installation Guide, Release 1.1.0 - Perform Post-Installation Tasks…. DNA-C was previously able to integrate successfully with ISE and remained active until some unknown changes was made onto Cisco ISE, causing the integration to become inactive and pxgrid unable to be established between the two. Reinstallation of ISE has been made, and all the steps outlined in the webpage above has been followed, however, the integration with ISE from DNA-C still fails. I'm not sure if I'm missing something? Any help/advise is very much appreciated.

Re: Unable to re-integrate Cisco ISE with DNA-C

ognyan.totev — Wed, 11 Apr 2018 09:11:05 GMT

You have deployed one or more ISE version 2.3 hosts on your network. If you have a multi-host ISE deployment, integrating with the ISE admin node is recommended.Are you use 2.3 as it shown ???

Re: Unable to re-integrate Cisco ISE with DNA-C

csco10836880 — Wed, 11 Apr 2018 09:18:34 GMT

Hi Ognyan,

We have a pair of ISE (in primary & secondary) running version 2.3, which was later upgraded to 2.4 as part of troubleshooting this problem.

Re: Unable to re-integrate Cisco ISE with DNA-C

thomas — Thu, 12 Apr 2018 22:08:40 GMT

You have provided no errors or screenshots or other symptoms to indicate what the possible problem might be.

I would suggest calling TAC for troubleshooting.

Re: Unable to re-integrate Cisco ISE with DNA-C

hslai — Fri, 13 Apr 2018 03:36:14 GMT

A good chance that you are hitting this bug -- CSCvi94778

Re: Unable to re-integrate Cisco ISE with DNA-C

Damien Miller — Fri, 13 Apr 2018 07:01:16 GMT

He mentioned that they upgraded to 2.4 and sounds like he is still experiencing the problem. Is CSCvi94778 also an issue in 2.4, or it it just 2.3 patch 3? The email I had passed on to me today indicated only 2.3 patch 3 however being a Cisco internal site I cannot view the details.

Hope someone knows as we have client facing DNA projects starting. Currently going to suggest 2.3 patch 2 until there are further details.

Re: Unable to re-integrate Cisco ISE with DNA-C

hslai — Fri, 13 Apr 2018 11:25:37 GMT

CSCvi94778 appears impacting ISE 2.3 Patch 3 only. On the other hand, ISE 2.4 just released on 2018-MAR-28 so it's too new to be a recommended release.

DNA-C might have other issues preventing the integration with ISE. Thus, it's best to work with Cisco TAC.

Re: Unable to re-integrate Cisco ISE with DNA-C

jesus Barrios — Fri, 24 Aug 2018 04:06:47 GMT

the dcloud lab of SD-ACCESSV3 has the same problem between ISE and DNA :)....

Re: Unable to re-integrate Cisco ISE with DNA-C

hslai — Thu, 30 Aug 2018 18:46:41 GMT

Please open a ticket with Cisco dCloud team to report it.