topic Re: Unable to login to secondary ise cli in Network Access Control

Unable to login to secondary ise cli

engineer467 — Tue, 19 May 2020 10:26:43 GMT

Hello,

Let me explain the issue and how it unfolded in steps-

1. 'Replication stopped' error seen on primary ise alarms, message says 'ISE Indexing Engine not running : Server=ise02'

2. This error will require a restart of ise application on secondary ise02.

3. Also there was NTP and DNS resolution issue also, so I first fixed that by logging into primary ise. I had to reset password for cli since the old one was expired.

4. NTP and DNS issue fixed.

5. Now when I tried to login to secondary ise cli to restart ise service, its not taking the old or new cli password. May be the password change event is not replicated.? What do i do now?

Thanks.

Re: Unable to login to secondary ise cli

poongarg — Tue, 19 May 2020 13:56:34 GMT

In such case do password recovery on the ISE node by booting the node with the same ISE version ISO image.

Follow below document:

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/200568-ISE-Password-Recovery-Mechanisms.html

Re: Unable to login to secondary ise cli

engineer467 — Wed, 20 May 2020 02:50:25 GMT

Will it have any effect on the current node deployment?, since it is a secondary ISE.

Re: Unable to login to secondary ise cli

poongarg — Wed, 20 May 2020 03:37:05 GMT

No, It will not cause any issue with the current deployment.