topic Re: rebuilding/reimaging MnT VM node in Network Access Control

rebuilding/reimaging MnT VM node

arane0001 — Tue, 27 May 2025 14:09:38 GMT

I am having issue with my MnT standby node. Can i delete it from Vmware but not delete/de-register it from the deployment ?

And then re-image with using the same hostname as before ? Ofcourse it will have the certs uploaded again.

Any downside to this process ?

Re: rebuilding/reimaging MnT VM node

Aref Alsouqi — Tue, 27 May 2025 14:47:06 GMT

What would you want to do that? why to not to deregister the node and then readd it once it's deployed which is recommended? I don't think leaving it registered to the deployment would work because each node in the deployment would have its own identifier and that is not the hostname, FQDN, or the IP only, so the new MnT identifier wouldn't match with the old one.

Re: rebuilding/reimaging MnT VM node

arane0001 — Tue, 27 May 2025 15:30:46 GMT

The reason no to de-register is because it will ask me to promote another node in the deployment as a standby MnT (mostly a PAN). and then it will reboot that node . Once re register this node , i will need to remove the MnT persona from that node which will reboot the node again.

if you say each node has different identifier then this may not work.

Re: rebuilding/reimaging MnT VM node

Aref Alsouqi — Tue, 27 May 2025 15:53:02 GMT

Are you sure it will reboot the node? I think only ISE services will be restarted not the whole node. Also, depending on your environment, restarting ISE services on the PAN might not have any impact on the users sessions.

Cisco Identity Services Engine Administrator Guide, Release 3.0 - Deployment of Cisco ISE [Cisco Identity Services Engine] - Cisco

Re: rebuilding/reimaging MnT VM node

arane0001 — Tue, 27 May 2025 17:08:55 GMT

Sorry, that's what i meant by. it will restart the services.