topic Re: Cisco ISE GUI problem (limited version) in Network Access Control

Cisco ISE GUI problem (limited version)

anxo.darosa — Thu, 03 Mar 2022 18:32:15 GMT

Hello.

I couldn’t connect to the GUI on my Cisco ISE devices.

I followed this URL: https://community.cisco.com/t5/network-access-control/cannot-access-ise-gui/td-p/3220198/page/2

I did these steps:

ise/admin# application stop ise 
ise/admin# application start ise safe

ise/admin# application stop ise
ise/admin# application start ise

The GUI works, but with a limited function, because only have the "Administration" tab (snapshot-1) and not the other tasks (snapshot-2).

I suppose I did something wrong, and I follow in safe mode, I think.

Re: Cisco ISE GUI problem (limited version)

Rob Ingram — Thu, 03 Mar 2022 18:37:19 GMT

@anxo.darosa if you cannot see those other tabs you've probably not logged into the Primary PAN ISE node. You can only manage all options of the ISE cluster from the Primary PAN, on the other nodes you get limited access related to that node. Or you've got Role Based Access controlling what exactly you are able to access.

Re: Cisco ISE GUI problem (limited version)

Mike.Cifelli — Thu, 03 Mar 2022 18:47:31 GMT

I am with @Rob Ingram on this one. Screenshot_1 depicts secondary PAN gui. To confirm, click deployment. You should see a Promote to primary button.

Re: Cisco ISE GUI problem (limited version)

anxo.darosa — Thu, 03 Mar 2022 20:52:15 GMT

Thank so much Rob Ingram and Mike.Cifelli for your quick answer, i feel so stupid, sorry!

on the first node, as it is the primary, i can see all options, and, on the other node which is the secondary, i have a restrict view of the configuration.

Perfect, it is clear.

Only one question more, these devices were already configured, and I would like to do that if the first node, primary, fails, automatically the secondary take this role.

To do this thing, on the primary node, would I have to enable PAN Auto Failover? Because i can't.

Re: Cisco ISE GUI problem (limited version)

Rob Ingram — Thu, 03 Mar 2022 20:53:54 GMT

@anxo.darosa you can only do PAN auto failover if you have 3 nodes, the 3rd node acts as a PAN health check node. With only 2 nodes you will have to manually promote the secondary node to primary.

Re: Cisco ISE GUI problem (limited version)

anxo.darosa — Thu, 03 Mar 2022 20:55:08 GMT

@Rob Ingram clear and fast!

Thank so much for your help!