topic Re: Understanding Break Times During Automatic Failover in a Small-Sca in Network Access Control

Understanding Break Times During Automatic Failover in a Small-Scale Redundant (HA) Configuration of Cisco ISE

Translator — Tue, 12 Nov 2024 08:12:34 GMT

Two Cisco ISE x physical enclosures are redundant in a small-scale HA (PAN+MNT+PSN) configuration, but with this configuration, the Secondary aircraft must be manually promoted when the Primary aircraft fails, so we plan to add one health check node.

In this configuration, if the Primary machine fails, the Secondary machine will automatically be promoted to Primary. What is the service outage time (= downtime that cannot be newly authenticated)? If you know if it will take 15-30 minutes, or if it will take a shorter time, it will be helpful if you can teach.

Re: Understanding Break Times During Automatic Failover in a Small-Sca

ahollifield — Mon, 28 Oct 2024 11:53:55 GMT

None, your third node needs to be a PSN, not a MnT node.

https://cs.co/ise-scale

Re: Understanding Break Times During Automatic Failover in a Small-Sca

Translator — Mon, 28 Oct 2024 11:55:23 GMT

None, your third node needs to be a PSN, not a MnT node.

https://cs.co/ise-scale

Re: How does the Cisco ISE break time during automatic failover in a small HA configuration?

Translator — Tue, 12 Nov 2024 08:12:05 GMT

Self-resolved.

After all, it took 15-20 minutes, the same time as manual promotion.