topic Re: ISE 2.2 No connectivity to pxGrid Node in Network Access Control

ISE 2.2 No connectivity to pxGrid Node

umahar — Mon, 11 Sep 2017 13:57:27 GMT

I have a cluster with 1 PAN, 1 M&T and 1 PxGrid.

All nodes are synced and I have issued a pxGrid template certificate to all nodes.

I still see the 'No connectivity to pxGrid Node'.

Am i missing any step ?

Re: ISE 2.2 No connectivity to pxGrid Node

Craig Hyps — Mon, 11 Sep 2017 14:13:17 GMT

Make sure signing CA cert/chain is present in each nodes trust store. Try service restart (for example, restart pxGrid node).

Re: ISE 2.2 No connectivity to pxGrid Node

umahar — Mon, 11 Sep 2017 20:43:02 GMT

The same root CA has assigned the admin certificates to all the nodes and they are all joined to the cluster so I guess there is no issue with certificates.

I used the same CA to issue a pxGrid template certificate to the Admin, M&T and pxGrid.

The pxGrid node is stuck in initializing stage after multiple restarts.

I checked the bug https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuz50086/?referring_site=bugquickviewredir but I have all IPs allowed in the Admin Access List

Re: ISE 2.2 No connectivity to pxGrid Node

jont717 — Thu, 12 Dec 2019 21:41:53 GMT

Did you get this fixed? Mine is in same state.

Re: ISE 2.2 No connectivity to pxGrid Node

jont717 — Thu, 12 Dec 2019 21:59:32 GMT

Fixed it! It was the Cert issue mentioned. I just created a self-signed cert for PxGrid. It was using a cert that was signed by a CA not in the trust store.

I just went with a self-signed cert just for PxGrid and now it came right up.

Re: ISE 2.2 No connectivity to pxGrid Node

charlesansong53055 — Sun, 14 Mar 2021 08:43:22 GMT

Should the same certificate template be used in issuing certs to the admin and monitoring nodes ? assuming that a cert has been issued to the admin and monitoring nodes by same root and intermediate authority, will not issuing pxgrid certificate template cause this issue ?