topic Re: Ise PAN Question in Network Access Control

Ise PAN Question

benolyndav — Mon, 20 May 2024 19:12:59 GMT

If I need to promote my Sec PAN to Primary PAN due to the PRI PAN being stuck in initilizing, does the promotion cause the ise restart on all nodes or just the Sec PAN Node.??

Thanks

Re: Ise PAN Question

Rob Ingram — Mon, 20 May 2024 19:32:34 GMT

@benolyndav only the PAN services are restarted on the secondary when promoted. I'd recommend making the change OOH.

Bear in mind some services are unavailable when the P-PAN is down - https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/admin_guide/b_ISE_admin_3_0/b_ISE_admin_30_deployment.html#ID59

Re: Ise PAN Question

benolyndav — Mon, 20 May 2024 19:41:33 GMT

@Rob Ingram
I have seen the option for this , when you do this is it just like logging in to the original Pri PAN where you have all the sections for aministration , operations, polcy sets etc.?

Thanks

Re: Ise PAN Question

Rob Ingram — Mon, 20 May 2024 19:46:54 GMT

@benolyndav you login to the GUI of the Secondary PAN. Navigate to Administration > System > Deployment and Click Promote to Primary

https://www.ciscopress.com/articles/article.asp?p=2812072&seqNum=2