secondary ISE with DNAC

[ahmed ramadan mohamed]

Hello Gents,

i have 2 ISE nodes integrated with DNAC but recieve below errors. but there is rechability between ise nodes and dnac.

[marce1000]

  - Neither the  ISE version or DNAC version are being mentioned , check this bug report for relevance :
                     https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwb88254

 M.

[ahmed ramadan mohamed]

Hello Marce.

thanks for your reply.

both ISE nodes pxgrid is enabled.

primary node is connected and up but other has issue. both ISE nodes has same version

DNAC version is 2.3.5.5

[marce1000]

  - Since pxgrid is involved ,  the mentioned bug report could be involved , yet it mentions 2.3.5.4
     as an already fixed version. I think you need to contact TAC on this one and or point to 
     the bug report and ask their opinions on it too.

 M.

[Torbjørn]

Does both nodes use the same certificate for pxgrid?

[ahmed ramadan mohamed]

Hello Torbjorn,

both ISE DNAC use self signed certificate. we didn'nt change any certificate.

[Torbjørn]

That's odd. It should have been trusted when you established the integration.

You should be able to fix it by downloading the certificate from the second node and importing it as trusted on your DNAC under "System" > "Settings" > "Trustpool". If that doesn't work you can try tearing down and re-establishing the integration during a maintenance window.