Cisco ACS 5.5 - External Identity Stores - AD - node 2 - Node Not Responding

hujian — Mon, 11 Mar 2019 05:24:56 GMT

Hi All,

I login Node1 GUI [Primary node], found node 2 [Secondary node] status: Node Not Responding. Join/Test Connection from Node1 for Node2 failed.

Cisco ACS 5.5 - External Identity Stores - AD - node 2 - status: Node Not Responding

However, I login to Node2 GUI and verified that Node2 to AD is Joint and Connected. Join/Test Connection from Node2 are all passed.

Configuration replication is working fine. I believe Node1 is using IP to communicate with Node2

System Administration, Operations, Distributed System Management, Node2 status: Updated and Replication time is recent.

For AD, it seems like Node1 couldn't talk to Node2 to check the communication between Node2 and AD. But Node2 is able to communicate with AD.

Are they using DNS to resolve from nodename to IP? Do we have to register A record on DNS server for both ACS nodes?

SSH to both nodes and show application status, all running.

Thoughts?

Thanks!

I've seen the same issue ...

eoinwhite1 — Wed, 22 Jul 2015 19:44:13 GMT

I've seen the same issue ... seems to be a bug.

https://tools.cisco.com/quickview/bug/CSCuv10688

In order to join Secondary

ajc — Fri, 24 Jul 2015 17:01:59 GMT

In order to join Secondary Node and PSNs to Primary PAN Node is mandatory to have a DNS Entry for the FQDN Name of the Secondary and PSNs ISEs and valid certificate on those signed by a trusted certificate authority registered on Primary ISE Local Certificate Store.

topic Cisco ACS 5.5 - External Identity Stores - AD - node 2 - Node Not Responding in Network Access Control

Cisco ACS 5.5 - External Identity Stores - AD - node 2 - Node Not Responding

I've seen the same issue ...

In order to join Secondary