topic Re: ISE PAN Failover in Network Access Control

ISE PAN Failover

AndreaTornaghi — Mon, 27 Mar 2017 12:36:38 GMT

Hi Expert,

we are deploying a new PoC enviroment and we are running in a strange problem.

Scenario:

3 nodes of ISE in PAN failover running version 2.2.

After some days that the cluster was running I have seen that both PAN server were running as secondary.

From logs on primary PAN I can see the following error message:

"ADE-SERVICE[1216]: hangup signal caught, configuration read"

It seems that ISE application on primary node was in stuck and the third node (Healt Check Node) was not able to complete the failover between primary and secondary.

Does anyone has an idea on it?

Best Regards

Andrea Tornaghi

Re: ISE PAN Failover

umahar — Mon, 27 Mar 2017 14:17:09 GMT

I experienced a similar issue a year back during switching between secondary and primary PAN in ISE 1.4.

Both Admin Nodes were shown as primary.

Please contact TAC and they should be able to fix it by installing a root patch.

Re: ISE PAN Failover

AndreaTornaghi — Mon, 27 Mar 2017 17:52:42 GMT

Many thanks, I am going to follow your suggestion to open a case.

Re: ISE PAN Failover

tipkopf — Fri, 16 Mar 2018 09:25:36 GMT

Hi Andrea

did you succeed in getting the issue solved for you? I ran in the same symptom although only in a single VM deployment:

ADE-SERVICE[1065]: [2385]:[error] cdp:infra: main.c[146] [system]: received SIGHUP

ADE-SERVICE[1071]: hangup signal caught, configuration read

would be great to have your inputs on this.

Thanks!