DNA and ISE integration problem - Page 2

Diana Karolina Rojas · ‎09-28-2018

Hello community,

We are having troubles doing the DNA and ISE integration, when we add the ISE in the DNA center all looks good and the device show the "ACTIVE" state, but I never see the client in pxGrid services, so ISE nevers see the DNA center as a client. In the Trusted Certificate from ISE I can see the DNA Center certificates, you have to know that DNA Center and ISE are in different domains, does that means?

All help will be appreciated.

Best Regards,

Gaur Samal · ‎10-29-2018

Hi Tom,

This definitely need live troubleshooting, please open up a TAC case or ask your Cisco partner/SE to open up for you.
TAC should be able to help you with this issue.

Thanks,
Gaur

John David · ‎03-10-2019

yes same here, i was also looking for such kind of issues.

tom.barat@dimensiondata.com · ‎11-02-2018

Hello,

As i previously said i was not able to open a TAC case for this issue because our ISE appliance is not under support contract, and the DNA center i am using belongs to a client, therefore i do not own the associated support contract and cannot use it for my own purposes.

Nevertheless i kept working on this issue. I reinstalled an ISE virtual appliance from scratch and was able to make the connection between DNA and the new ISE without any issues.

We currently have 2 theories regarding the initial issue's source :

- first, reinstalling a new ISE appliance allowed me to notice that our first ISE's NTP settings were all messed up (it currently believes we are July 4th). This could very well be the problem's source. In any case, poor NTP settings probably made things worse and potentially made the issue more difficult to troubleshoot.

- second, our first ISE has been used for a long time for all our test/lab/poc purposes. This means a lot of configuration was done by many different people and there might be "poor" configuration in use in the appliance. Specifically, the appliance was downgraded and upgraded many times in many different versions and patch level.

Thank you again for the help you provided.