topic Re: ISE 2.x: Failover ISE through API call? in Network Access Control

ISE 2.x: Failover ISE through API call?

musultan — Thu, 08 Feb 2018 08:24:21 GMT

hello Team,

My customer is asking for the following:

Is there a way to promote a Secondary Admin Node to Primary using an API Call? Basically we want to make a script that help us to promote a Secondary ISE node instead of using the GUI in "Administration > System > Deployment" path.

Is it possible or in the road-map?

Please advise.

Re: ISE 2.x: Failover ISE through API call?

Craig Hyps — Thu, 08 Feb 2018 15:03:34 GMT

There is no exposed API for this function. We have a special option that can be configured on any non-PAN node to perform this function automatically under Administration > System > Deployment > PAN Failover

/Craig

Re: ISE 2.x: Failover ISE through API call?

Jason Kunst — Thu, 08 Feb 2018 15:11:08 GMT

Please keep in mind this only works in a medium sized deployment or larger where you have dedicated policy services nodes

https://www.cisco.com/c/en/us/td/docs/security/ise/2-0/admin_guide/b_ise_admin_guide_20/b_ise_admin_guide_20_chapter_010.html#ID616