topic Changing the domain name on Cisco ISE 2.4 in Network Access Control

Changing the domain name on Cisco ISE 2.4

KiranSS74664 — Fri, 23 Oct 2020 05:13:15 GMT

Hi Guys,

We have 4 node distributed ISE 2.4 deployment (2 PAN + 2 PSN) and these are in production used for device authentication & wireless authentication. For various reasons we have to change the domain name on the ISE.

1. Is there a way to change the domain name on all 4 nodes.

2. What could be the implications of changing the domain name.

The ISE uses self-signed certificate & going forward we want to register with CA server.

Thanks,

Kiran

Re: Changing the domain name on Cisco ISE 2.4

Aref Alsouqi — Fri, 23 Oct 2020 09:27:37 GMT

To change the domain name on ISE I think you need to take each node out of the deployment, make it a standalone node, and then apply the command ip domain-name from CLI. This change would imply reassigning the certificates to the features, since the certificates would be tied to the domain name.

Re: Changing the domain name on Cisco ISE 2.4

KiranSS74664 — Fri, 23 Oct 2020 09:44:39 GMT

Thanks Aref for the reply. Do you see any other impact on system functionality based on our deployment.

Re: Changing the domain name on Cisco ISE 2.4

Aref Alsouqi — Fri, 23 Oct 2020 10:04:32 GMT

You welcome. I don't think there will be any. As long as the new certs and the DNS records on your AD are in place you should be good to go.