topic Re: DNAC Cluster IP in Software-Defined Access (SD-Access)

DNAC Cluster IP

Sergey Sakharov — Mon, 18 Feb 2019 13:37:31 GMT

I have DNAC 1.2.8 and ISE 2.4.0.357

I'm trying to integrate DNA with ISE and receive this error "expected failure phrase received: Trust establishment Operation Failed. Check ISE node role or whether remote server is reacheble"

ISE and DNAC live in the same subnet, there is no firewall between them. But after upgrade DNAC from 1.2.6 to 1.2.8 VIP stops responding, now i'm getting in DNAC from physical IP. How to fix VIP?

Re: DNAC Cluster IP

Tomas de Leon — Mon, 18 Feb 2019 13:53:10 GMT

The issue could be related to a Network Adapter not being "UP" or the keepalived service may need to be restarted.

$ ip a | grep enp
$ magctl service status keepalived
$ magctl service restart --hard keepalived

Re: DNAC Cluster IP

Sergey Sakharov — Mon, 18 Feb 2019 14:58:38 GMT

Files attached

Re: DNAC Cluster IP

Tomas de Leon — Mon, 18 Feb 2019 15:10:20 GMT

Sergey,

It appears your cluster link is down.

enp10s0 -> 192.168.1.1 is down.

This needs to be up. Please check your connectivity and make sure this Network adapter is connected and becomes in an ACTIVE UP state.

Then the VIP will come up.

Regards