ISE Operational data question

fredluneau — Thu, 20 May 2021 13:14:46 GMT

We recently performed a DR failover event for our distributed ISE environment which consists of 4 nodes, a PAN/MnT and PSN node in geographically distinct data centers. We shut down the ISE application on the primary data center PAN and PSN in order to effect the application unavailable as well as shut down the NICs on the primary d.c. PSN. We promoted the secondary PAN at the backup d.c.

Operations after failover appeared to run without issue.

My question is: While operating in this mode and operational changes were made on the backup data center PAN (now Primary), when failing back to the primary d.c. how does the platform ensure these operational changes are brought back to the primary d.c.? Does a manual configuration backup need to occur on the PAN acting as primary prior to reverting back to normal state? Then that configuration backup is restored once back in a normal state?

Thanks in advance

Re: ISE Operational data question

ilay — Fri, 21 May 2021 09:57:02 GMT

When the primary datacenter's ISE node is online again, it will re-register to the current PAN, the PAN will prompt the node status (in Administration-System-Deployment-Deployment Nodes), it will prompt "Replication Stopped" "Please do a manual sync"

You can select this node, click Syncup, and wait for 10-20 minutes until "Node Status" turns green. At this time, all data is synchronized. You can choose a suitable time to switch PAN back to Primary DataCenter

HTH.

topic ISE Operational data question in Network Access Control

ISE Operational data question

Re: ISE Operational data question