SDA - DNAC is not pushing NAD's on ISE

[aleopoldie]

Hello there,

I am in the beginning of a new SDA deployment and I face an issue. 

DNAC is not pushing NAD's to the ISE during the border nodes onboarding. We checked the FW ports and the required flows seem opened. The integration between DNAC and ISE is good, otherwise we would see an error.

I don't see that much on official documentation for this specific topic, just the communication ports section from the DNAC's best practices guide : https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/hardening_guide/b_cisco_catalyst_center_security_best_practices_guide.html

Is there a way on the DNAC to see what is causing this issue ?

Thank you,

A.

[Torbjørn]

You could see if the "ise-bridge" service logs can give you any hints. You can view them under "System" > "System 360", Select view services next to your host(s), search for "ise-bridge" and click "Logs".

[marce1000]

         - Are the versions of ISE and DNAC compatible (couldn't find those info's directly myself) ?
         - Check DNAC logs when trying
         - On ISE you could for instance examine : 
                            show logging system ade/ADE.log
                            show logging application ise-psc.log

   M.

[aleopoldie]

Nothing weird on the ADE.log or ise-psc.log.

We found some ERS errors (see in attachment).

Perhaps it could be related to this bug https://bst.cisco.com/bugsearch/bug/CSCwh41075?rfs=qvred 

[marce1000]

       - As the bug reports mentions no Fixes Releases , then you need to invoke TAC , 

 M.