topic Re: MAR Cache Distribution Enable in Network Access Control

MAR Cache Distribution Enable

rhuel.phils — Sat, 20 Jun 2020 12:18:39 GMT

Hi All,

Just want to confirm if you enable the MAR cache distribution, will it require the ISE services to restart?

How to have visibility of two server that MAR distribution are done? anyway to confirm?

We have two server PRIM and SEC. our current version is 2.6 patch 7

Re: MAR Cache Distribution Enable

Francesco Molino — Sun, 21 Jun 2020 04:01:41 GMT

Hi
Enabling MAR won’t restart your services.
There’s a log file calledtracking.log you can look at normally which will start filling up when MAR is enabled

Re: MAR Cache Distribution Enable

poongarg — Sun, 21 Jun 2020 12:54:59 GMT

Adding to above, enable below components at debug level on ISE node from Administration > System > Logging > Debug Log configuration, to have detailed information:
Cache Tracker, Notification tracker and Replication tracker, Runtime-AAA

Later check the tracking.log, prrt-server.log and prrt-management.log as shown below:
show logging application tracking.log

Re: MAR Cache Distribution Enable

Damien Miller — Sun, 21 Jun 2020 21:57:40 GMT

Review the caveats for MAR cache as well. I would strongly suggest looking at EAP chaining with EAP-FAST or EAP-TEAP (2.7 /w Win10 b2004+) over using MAR.
https://www.cisco.com/c/en/us/support/docs/lan-switching/8021x/116516-problemsolution-technology-00.html
https://www.wiresandwi.fi/blog/mar-cache-in-ise-and-why-it-sucks