topic Re: ISE Node deregistration issue in Network Access Control

ISE Node deregistration issue

craddockchristopher — Wed, 25 Sep 2024 12:15:17 GMT

Community,

I was having some communications issues with one of my ISE nodes in my deployment. I went ahead and deregistered the node from the PAN. The PAN has processed the deregistration and no longer sees the node (a PSN). However, the PSN still believe it is part of the deployment, so its been orphaned in a way. How do I get the PSN back into a standalone state?

These are physical appliances (3755 PAN and 3715 PSN).

Thank you.

Re: ISE Node deregistration issue

MHM Cisco World — Wed, 25 Sep 2024 12:20:11 GMT

https://m.youtube.com/watch?v=iXKDleU9-3Q

Check this video

MHM

Re: ISE Node deregistration issue

PSM — Wed, 25 Sep 2024 12:25:01 GMT

Reset config of the application using CLI.

application reset-config ise

Then re register the node in deployment.

Re: ISE Node deregistration issue

craddockchristopher — Wed, 25 Sep 2024 12:36:03 GMT

Thank you. Ill try that and respond momentarily.

Re: ISE Node deregistration issue

Aref Alsouqi — Wed, 25 Sep 2024 15:06:21 GMT

When you run the "application reset-config ise" command you can decide if you want to wipe our all the configs (except for the network settings) or if you want to keep the certificates.

Another thing you could do I think would be to change the deregistered PSN persona to administration and then change it back to PSN.

Re: ISE Node deregistration issue

Aref Alsouqi — Wed, 25 Sep 2024 15:15:07 GMT

Seems if you try to connect to that PSN via this URL and you use the admin credentials to login then you don't have to use the reset command, I never tried it though:

https://< PSN IP address >/deployment-rpc/deregister-node