topic Re: ISE Re-Integration with DNAC in Network Access Control

ISE Re-Integration with DNAC

nalhafnawi — Sun, 25 Aug 2024 10:09:30 GMT

Hey guys,

i have 2 ISE nodes with all personas, one is primary PAN and the other is secondary. When I did the integartion with DNA i forgot to but the second node Certificate to be trust by primary so DNA connot trust the secondary node.

my question is, if i removed the integration between ISE and DNA will the configration on ISE be removed ?

what is the best practice ?

Re: ISE Re-Integration with DNAC

Leo Laohoo — Sun, 25 Aug 2024 12:01:17 GMT

https://www.youtube.com/watch?v=dKy9SYo0LvA

Re: ISE Re-Integration with DNAC

Greg Gibbs — Sun, 25 Aug 2024 22:29:01 GMT

The procedure would be similar to this example:
Reintegrate Cisco ISE with Cisco Catalyst Center

Catalyst Center has no control over ISE Policy Set configuration. For Group Based Policy (TrustSec), Cat Center pushes configuration to ISE (Security Groups, SGACLs, TrustSec Policies) via REST API, but those configurations will not be deleted from ISE when ISE is removed from CatC. When reintegrated with ISE, CatC will pull that GBP config from ISE again.