cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
20824
Views
54
Helpful
5
Replies

ISE 2.4 - Unable to load Context Visibility page.

joshhunter
Level 4
Level 4

Hello, have deployed a new 8x vISE distributed deployment on ISE 2.4 with patch 3. The nodes all all joined and in sync with the correct personas and certificates, I have checked that the services are running.

 

The intention is just to view profiling results, so added a bunch of switches, with device sensor configured and snmp, however not seeing any RADIUS live logs, not even failed attempts for unknown NADs. 

 

Also, getting the below error when trying to browse Context Visibility. Certificates are installed.

 

Unable to load Context Visibility page. Ensure that full certificate chain of admin certificate is installed on Administration->System->Certificates->Trust
ed Certificates. If not, install them and restart application services. Exception: None of the configured nodes are available: [{#transport#-1}{iwqhsjHLTBy-hbHlQv_SsA}{IS
*ISE PAN NODE*}{/IP PAN NODE*:9300

 

Does anyone have any ideas?
}]

2 Accepted Solutions

Accepted Solutions

Timothy Abbott
Cisco Employee
Cisco Employee

Hi,

 

Please contact the TAC to troubleshoot further.

 

Regards,

Tim

View solution in original post

Hello,

Update -

Ensure Reverse DNS is configured for ISE - You need to be able to resolve IPs to DNS name.
So make sure you add the DNS PTR records.

Also, from ISE CLI,
SSH into the Primary Policy Admin Node, type application configure ISE and chose the option –
Reset Context Visibility
Synchronize Context Visibility with Database

Login to ISE GUI and make sure nodes are in SYNC or resync if not.

As always recommend this work is performed during a change control window.

View solution in original post

5 Replies 5

Timothy Abbott
Cisco Employee
Cisco Employee

Hi,

 

Please contact the TAC to troubleshoot further.

 

Regards,

Tim

Hello,

Update -

Ensure Reverse DNS is configured for ISE - You need to be able to resolve IPs to DNS name.
So make sure you add the DNS PTR records.

Also, from ISE CLI,
SSH into the Primary Policy Admin Node, type application configure ISE and chose the option –
Reset Context Visibility
Synchronize Context Visibility with Database

Login to ISE GUI and make sure nodes are in SYNC or resync if not.

As always recommend this work is performed during a change control window.

Thanks joshhunter, worked for me. 

 

From CLI I had to type in command:

 application configure ise 

to get to the menu of options, but otherwise my context visibility is working now!

You're most welcome!

I'm glad that my resolution post from 2 years ago is still helping Engineers.