topic Re: how to change primary node to secondary node ? in Network Access Control

how to change primary node to secondary node ?

muhammadawwalbinmukhzar — Fri, 21 Feb 2020 19:12:17 GMT

i need to reset ise password because cannot login to the gui. after i use command reset-passwd ise admin, it show error like (only standalone or primary node can change the password) like that. Because of that ise became secondary node, so i cannot reset the password. so i came up with idea to :

to change secondary node to primary node ? i cannot change because cannot login to the gui. any ways to change from cli ? please help me. thank you.

Re: how to change primary node to secondary node ?

Damien Miller — Mon, 02 Dec 2019 03:56:59 GMT

You can only run that command on the primary admin node CLI, but it sets the password for the entire deployment. The GUI local admin account is replicated out.

Can you log in to the primary admin CLI? If so, then running "reset-passwd ise admin" and following the prompts will change the GUI admin password for all nodes.

Are you able to log in to the GUI on any nodes? if yes, but locked out of others would indicate a larger deployment sync issue to me.

Re: how to change primary node to secondary node ?

hslai — Sun, 08 Dec 2019 04:16:19 GMT

Only if automatic failover configured and the primary ISE node is down or if someone click it on the secondary admin node to make it primary, then the ISE primary node becomes secondary but not resetting ISE password.