Solved: How long can a PSN be disconnected from the ISE cluster?

redstar_cccc · ‎06-19-2019

We have a distributed setup running 2.4 patch 7. We ran into some problems and now one of our PSNs can't start its ISE application services. While we troubleshoot and give it CPR, how long can the PSN be out of the cluster before it needs to be rebuilt and rejoined as a fresh node?

Damien Miller · ‎06-19-2019

A node will have to be resynced via the "syncup" button from the deployment view if you hit 1,000,000 records pending replication, it will show replication stopped. I'm not aware if there is a time associated with this as I have always hit the messages pending replication cutoff.

Edit: with the others, if the application service won't startup you probably have a larger issue with the node.

View solution in original post

Surendra · ‎06-19-2019

If the PSN can’t start its Application Server, it is as good as dead (in most cases). There is no definite time as such for how long you can keep it that way as long as you believe that it can be fixed. Get it checked with TAC. They may bring it back to life.

Mike.Cifelli · ‎06-19-2019

How are your vm resources configured? Are you able to start it in safe mode?

Damien Miller · ‎06-19-2019

A node will have to be resynced via the "syncup" button from the deployment view if you hit 1,000,000 records pending replication, it will show replication stopped. I'm not aware if there is a time associated with this as I have always hit the messages pending replication cutoff.

Edit: with the others, if the application service won't startup you probably have a larger issue with the node.

redstar_cccc · ‎07-31-2019

Thank you, the PSN was offline for over a month and we were able to bring the services up and sync it to the cluster again with 700,000 pending records.