topic Issue logging into Cisco ISE in Network Access Control

Issue logging into Cisco ISE

Bhardwajp — Thu, 19 Aug 2021 11:33:43 GMT

Hi ALL,

Customer is on Cisco ISE 2.3 in virtual environment.Not able to logging to Primary PAN through GUI as well as CLI

Error while accessing through GUI.

"Oops. Something went wrong
An error occurred, please contact your administrator
Please notify your administrator. If you are the administrator check your log file.
You may proceed to Login page."

Error while accessing through CLI
/opt/system/bin/carssh.sh.screen: line 38: 12555 Segmentation fault
/opt/system/bin/carssh -s /opt/system/etc/carscli/default/main_tree.par

SYNC status :

PERSONA ROLE ACTIVE REPLICATION
------------------- --------------- ---------- ---------- ---------------
PAN SECONDARY ACTIVE SYNC COMPLETED
PAN PRIMARY STANDBY Not Applicable

Thanks in advance

Re: Issue logging into Cisco ISE

Mark Elsen — Thu, 19 Aug 2021 16:46:59 GMT

- Reboot the particular ISE node (forcibly perhaps) , scrutinize the boot process , watch for errors (e.g.)

Re: Issue logging into Cisco ISE

Marcelo Morais — Thu, 19 Aug 2021 23:53:34 GMT

Hi @Bhardwajp ,

are you able to log in to the Secondary PAN (GUI and CLI)?

If the answer is yes, try to Promote the Secondary PAN to Primary, at: Administration > System > Deployment:

Hope this helps !!!

Re: Issue logging into Cisco ISE

Bhardwajp — Sun, 29 Aug 2021 15:33:12 GMT

Hi Marcelo,

I can logging to the secondary ISE node however im just thinking what will be the right option... to promote the primary node to secondary or to reload the primary node.

Any advise.

Re: Issue logging into Cisco ISE

Marcelo Morais — Sun, 29 Aug 2021 22:46:27 GMT

Hi @Bhardwajp ,

sometimes promoting the Secondary PAN to Primary solves some database issues.

In other words:

1st promote Secondary PAN

2nd test the GUI

3rd if everything is OK, promote back the old Primary PAN

Hope this helps!!!