Cisco ise change roles deployment large

[ivan.martin]

Hi good afternoon

We have 21 nodes distributed  of cisco ise v2.3 large. We would like to know which are the steps to change the roles (

Such as: (Mnt Primary will change to pan primary)

Before

pan primary

pan secondary

psn 1

psn 2

psn 3

mnt primary 

mnt secondary

After

pan primary (psn 1)

pan secondary (mnt primary)

psn 1 (another hardware)

psn 2

psn 3

mnt primary (another hardware)

mnt secondary

Does exist some documentation to do this process? Which will be the correct sequence for this? (or considerations)

REgards, Ivan. 

[ivan.martin]

Sorry

I forgot some questions:

Which is better, do a factory default to change the rol (from mnt to pan) or instead of this, do a application reset-config?

Regards, Ivan. 

[Marcelo Morais · Accepted solution]

Hi @ivan.martin ,

 first of all:

PSN A: PAN Primary
PSN B: PAN Secondary
PSN C: MnT Primary
PSN  MnT Secondary
PSN E: PSN 1
PSN F: PSN 2
PSN G: PSN 3
PSN H: New Hardware MnT Primary
PSN I: New Hardware PSN

 1. PSN B >> de-register from the ISE Cube
 2. PSN D >> promote to MnT Primary
 3. PSN C >> change the role, from MnT Secondary to PAN Secondary
 4. PSN H >> install from scratch as a MnT Secondary
 5. PSN H >> Promote to MnT Primary
 6. PSN C >> promote to PAN Primary
 7. PSN A >> de-register from the ISE Cube
 8. PSN E >> change the role, from PSN to PAN Secondary
 9. PSN E >> promote to PAN Primary
10. PSN I >> install from scratch as a PSN

Note: if your MnT has a different Disk size, you must reinstall it, otherwise, the application reset-config is faster.

Hope this helps !!!

[ivan.martin]

Hi Marcelo

MnT shoud be change to Pan. My question is: If Mnt has a speciall database different to Pan, Does the recommendation might be do reimage instead of only change the role?

Regards, Ivan. 

[Damien Miller · Accepted solution]

As long as you're happy with the existing disk size, then it doesn't matter and you can just swap the roles. As Marcelo pointed out, if you want to change the disk sizes, then you have to reinstall.