topic pxGrid Services on two node cluster in Network Access Control

pxGrid Services on two node cluster

Wes Schochet — Fri, 13 Nov 2020 14:52:07 GMT

Hi All-

I have a two node ISE cluster ver 2.7 SP2. I will be using this for a DNAC deployment.

Node 1 is Primary Admin, Secondary Monitoring

Node 2 is Secondary Admin, Primary Monitoring

Both nodes show personas of "Administration, Monitoring, Policy Service, pxGrid".

When I look at the application status, the pxGrid services on node 1 show disabled. Is this normal / expected? I am not experiencing any problems, just curious why the services show disabled?

Re: pxGrid Services on two node cluster

martin.fischer — Fri, 13 Nov 2020 15:16:17 GMT

Hi @Wes Schochet

Yes, this is the intended behavior. The service will be active only one node at a time. The other node will start the services if an issue with the active node is discovered.

From: https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/admin_guide/b_ise_27_admin_guide/b_ISE_admin_27_pxgrid.html

"On the active Cisco pxGrid 1.0 node, these processes show as Running. On the standby Cisco pxGrid 1.0 node, they show as Disabled. If the active pxGrid 1.0 node goes down, the standby pxGrid node detects this, and starts the four pxGrid processes. Within a few minutes, these processes show as Running, and the standby node becomes the active node."

Re: pxGrid Services on two node cluster

Mike.Cifelli — Fri, 13 Nov 2020 15:45:57 GMT

To add additional info to @martin.fischer response:

You should see the use of Pxgrid 2.0 after integration. Under Pxgrid services in ISE, once you integrate DNAC and ISE you should see a subscriber from DNAC that appears as offline, and should remain offline by default. If you toggle over to 'web clients' tab you should see corresponding dnac client names/entries appear as status ON. You can verify integration via both in ISE and in DNAC under system360. For integration guidance see section (Integrate Cisco ISE with Cisco DNA Center): https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/1-3-3-0/install_guide/2ndGen/b_cisco_dna_center_install_guide_1_3_3_0_2ndGen/b_cisco_dna_center_install_guide_1_3_2_0_M5_chapter_0111.html#task_ikj_pg3_sfb

Additional pxgrid info: https://developer.cisco.com/docs/pxgrid/#!introduction-to-pxgrid-2-0/introduction-to-pxgrid-20

HTH!

Re: pxGrid Services on two node cluster

Wes Schochet — Fri, 13 Nov 2020 16:06:19 GMT

Great - thanks!

Re: pxGrid Services on two node cluster

Jason Kunst — Fri, 13 Nov 2020 16:09:22 GMT

pxGrid 1.0 (shouldn't be used any longer) will run active standby for XMPP and not web clients (STOMP) pxGrid 2.0 runs active/active. ISE 3.0 has pxGrid 1.0 in maintenance mode. pxGrid is being required on any new integrations and DNAC has been using pxGrid 2.0 all along.

https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/release_notes/b_ise_30_rn.html#Cisco_Concept.dita_9f050957-ae34-4c14-a154-f6e71cab67cc