Cisco ISE GUI problem (limited version)

[anxo.darosa]

Hello.

I couldn’t connect to the GUI on my Cisco ISE devices.

I followed this URL: https://community.cisco.com/t5/network-access-control/cannot-access-ise-gui/td-p/3220198/page/2

I did these steps:

ise/admin# application stop ise 
ise/admin# application start ise safe

ise/admin# application stop ise
ise/admin# application start ise

The GUI works, but with a limited function, because only have the "Administration" tab (snapshot-1) and not the other tasks (snapshot-2).

I suppose I did something wrong, and I follow in safe mode, I think.

[Rob Ingram · Accepted solution]

@anxo.darosa if you cannot see those other tabs you've probably not logged into the Primary PAN ISE node. You can only manage all options of the ISE cluster from the Primary PAN, on the other nodes you get limited access related to that node. Or you've got Role Based Access controlling what exactly you are able to access.

[Mike.Cifelli · Accepted solution]

I am with @Rob Ingram on this one.  Screenshot_1 depicts secondary PAN gui.  To confirm, click deployment.  You should see a Promote to primary button.  

[anxo.darosa]

Thank so much Rob Ingram and Mike.Cifelli for your quick answer, i feel so stupid, sorry!

on the first node, as it is the primary, i can see all options, and, on the other node which is the secondary, i have a restrict view of the configuration.

Perfect, it is clear.

Only one question more, these devices were already configured, and I would like to do that if the first node, primary, fails, automatically the secondary take this role.

To do this thing, on the primary node, would I have to enable PAN Auto Failover? Because i can't.

---

[Rob Ingram · Accepted solution]

@anxo.darosa you can only do PAN auto failover if you have 3 nodes, the 3rd node acts as a PAN health check node. With only 2 nodes you will have to manually promote the secondary node to primary.

[anxo.darosa]

@Rob Ingram clear and fast!

Thank so much for your help!