topic Re: How to enable auto PAN failover on ISE 2.3 in Network Access Control

How to enable auto PAN failover on ISE 2.3

msompong1 — Sun, 10 Jan 2021 12:36:21 GMT

Hi All,

I'm running 2 VM of ISE 2.3 patch 6 with deployment mode as below

But once I've tried to enable the auto failover , I'm got the error below. What does it mean and how can I resolve this?

Thank you for all answer in advance.

Re: How to enable auto PAN failover on ISE 2.3

Rob Ingram — Sun, 10 Jan 2021 15:38:45 GMT

@msompong1

Unfortunately, you cannot enable PAN auto failover if you only have 2 nodes in your deployment, you need a 3rd node to act as the health check monitor. You can still manually failover the PAN, or setup another node in the cluster so you can enable auto failover.

FYI, ISE 2.3 is end of support June 17th 2020, you should consider upgrading.

Re: How to enable auto PAN failover on ISE 2.3

Mohammed al Baqari — Mon, 11 Jan 2021 06:06:50 GMT

Hi,

Your nodes are serving PAN and PSN roles. Hence its failing. You need to
disable session services and spin separate nodes for them.

***** please remember to rate useful posts

Re: How to enable auto PAN failover on ISE 2.3

msompong1 — Tue, 12 Jan 2021 02:21:50 GMT

Hi Rob,

Thank you for your explanations.

Re: How to enable auto PAN failover on ISE 2.3

msompong1 — Tue, 12 Jan 2021 02:22:35 GMT

Hi Mohammed,

Thank you.