topic Re: ISE 2.2 P3, PSN Registration or Sync Failed in Network Access Control

ISE 2.2 P3, PSN Registration or Sync Failed

newbieftd — Tue, 06 Feb 2018 17:36:04 GMT

Setting up PSN in distributed environment. I can register the server but fails the initial registration/sync. Yellow triangle in Node Status, suggest de-register/re-register. I have tried numerous times. Fails after 20-40 minutes.

I have successfully registered (2) other PSN's prior to this one.

Verified NTP, DNS (A/PTR records),can ping to/from PRI/SEC cluster nodes.

All (3) PSN's are different remote sites, through FW's with same settings.

Is it possible to kick-off the sync again?

What can I monitor to see where it is failing?

Thanks,

-cliff

Re: ISE 2.2 P3, PSN Registration or Sync Failed

saxenanitesh8522 — Wed, 07 Feb 2018 14:58:49 GMT

Dear Cliff,

You see the logs by tail the ADE.log or do show logging system /ADE.log while doing the registration so it let you know why it's failing. please do a terminal length 0 and do logging of the putty.

Re: ISE 2.2 P3, PSN Registration or Sync Failed

newbieftd — Wed, 07 Feb 2018 15:53:31 GMT

Thanks – I looked at the ADE.log before and I don’t see an error (associated with this – but I am not sure what I am looking for).

I am registering ISE-MCV-1 (starts at : 2018-02-06T07:33:05)

Attaching log -

-cliff

email: lang@metsci.com<mailto:lang@metsci.com>

PH: 703-326-2849

Re: ISE 2.2 P3, PSN Registration or Sync Failed

hslai — Sun, 18 Feb 2018 02:31:14 GMT

I hope you already engaged Cisco TAC on this.

I am not seeing much in the log file you provided so I am guessing that is from the node you were registering. We need look at the debug log files on the primary ISE node, as well.