topic Re: How to send notification email when ISE Primary PAN is down assuming manual failover? in Network Access Control https://community.cisco.com/t5/network-access-control/how-to-send-notification-email-when-ise-primary-pan-is-down/m-p/3505327#M519015 <HTML><HEAD></HEAD><BODY><P>Thanks Craig, but if i don't have tertiary health check node and i only have two nodes which i need to do the failover manually how can i get a notification email when Primary PAN is down so i can promote the Secondary PAN as soon as possible, is this possible?</P></BODY></HTML> Tue, 19 Dec 2017 15:25:26 GMT Grendizer 2017-12-19T15:25:26Z How to send notification email when ISE Primary PAN is down assuming manual failover? https://community.cisco.com/t5/network-access-control/how-to-send-notification-email-when-ise-primary-pan-is-down/m-p/3505325#M519013 <HTML><HEAD></HEAD><BODY><P><SPAN style="font-size: 10.0pt; font-family: 'Arial',sans-serif;">How to send notification email when ISE Primary PAN is down assuming manual failover? Is the below config doing the trick?</SPAN></P><P><SPAN style="font-size: 10.0pt; font-family: 'Arial',sans-serif;">a) Administration &gt; System &gt; Settings &gt; SMTP Server</SPAN></P><P><SPAN style="font-size: 10.0pt; font-family: 'Arial',sans-serif;">b) Administration &gt; System &gt; Settings &gt; Alarm Settings &gt; Replication Failed &gt; Edit &gt; Enter multiple e-mails separated with comma</SPAN></P><P><SPAN style="font-size: 10.0pt; font-family: 'Arial',sans-serif;">c) Administration &gt; System &gt; Settings &gt; Alarm Settings &gt; Replication Stopped &gt; Edit &gt; Enter multiple e-mails separated with comma</SPAN></P><P>is this config will be pushed to secondary PAN and when noticing the Primary PAN is down will send email?</P></BODY></HTML> Tue, 19 Dec 2017 02:22:43 GMT https://community.cisco.com/t5/network-access-control/how-to-send-notification-email-when-ise-primary-pan-is-down/m-p/3505325#M519013 Grendizer 2017-12-19T02:22:43Z Re: How to send notification email when ISE Primary PAN is down assuming manual failover? https://community.cisco.com/t5/network-access-control/how-to-send-notification-email-when-ise-primary-pan-is-down/m-p/3505326#M519014 <HTML><HEAD></HEAD><BODY><P>Some functions will not function correctly while Primary PAN is down, such as creation of new guest account from PSN.&nbsp; Be sure to promote Secondary PAN either manually or automatically via tertiary health check node. </P><P></P><P>/Craig</P></BODY></HTML> Tue, 19 Dec 2017 14:41:42 GMT https://community.cisco.com/t5/network-access-control/how-to-send-notification-email-when-ise-primary-pan-is-down/m-p/3505326#M519014 Craig Hyps 2017-12-19T14:41:42Z Re: How to send notification email when ISE Primary PAN is down assuming manual failover? https://community.cisco.com/t5/network-access-control/how-to-send-notification-email-when-ise-primary-pan-is-down/m-p/3505327#M519015 <HTML><HEAD></HEAD><BODY><P>Thanks Craig, but if i don't have tertiary health check node and i only have two nodes which i need to do the failover manually how can i get a notification email when Primary PAN is down so i can promote the Secondary PAN as soon as possible, is this possible?</P></BODY></HTML> Tue, 19 Dec 2017 15:25:26 GMT https://community.cisco.com/t5/network-access-control/how-to-send-notification-email-when-ise-primary-pan-is-down/m-p/3505327#M519015 Grendizer 2017-12-19T15:25:26Z Re: How to send notification email when ISE Primary PAN is down assuming manual failover? https://community.cisco.com/t5/network-access-control/how-to-send-notification-email-when-ise-primary-pan-is-down/m-p/3505328#M519016 <HTML><HEAD></HEAD><BODY><P>Automatic failover requires &gt; 2 nodes today.&nbsp; Background is that if monitor is on PPAN itself, then failure of PPAN also fails checker, and monitor on Secondary PAN will not detect network connectivity issues leading to potential Active/Active and split brain operation.&nbsp; To request change to this or allow checker to run on server other than ISE server, then please work with account team to raise enhancement.</P><P></P><P>In 2-node setup, SNMP monitoring tools as well as scripted API could run queries to detect server state to alarm admins of need to promote Secondary.</P><P></P><P>Craig</P></BODY></HTML> Tue, 19 Dec 2017 15:37:56 GMT https://community.cisco.com/t5/network-access-control/how-to-send-notification-email-when-ise-primary-pan-is-down/m-p/3505328#M519016 Craig Hyps 2017-12-19T15:37:56Z Re: How to send notification email when ISE Primary PAN is down assuming manual failover? https://community.cisco.com/t5/network-access-control/how-to-send-notification-email-when-ise-primary-pan-is-down/m-p/3505329#M519017 <HTML><HEAD></HEAD><BODY><P>Thanks Craig...</P></BODY></HTML> Tue, 19 Dec 2017 17:07:12 GMT https://community.cisco.com/t5/network-access-control/how-to-send-notification-email-when-ise-primary-pan-is-down/m-p/3505329#M519017 Grendizer 2017-12-19T17:07:12Z