cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

1376
Views
0
Helpful
2
Replies
Andrew Mathu
Beginner

Cisco ISE Nodes Synchronization Problem.

Hello,

 

We have an ISE deployment running ISE version 2.3. We recently deployed ISE patch five to the setup. Afterwards, only the Primary admin node became connected. Under Administration > Deployment, the rest of the nodes show "Not in Sync" with an orange warning next to them

 

.A manual snyc using Syncup does not resolve the issue as the nodes go to the state "In Progress" and this can last up to three hours, after which they revert back to the "Not in Sync" error.

 

The nodes are: Primary Admin, Secondary Admin, PSN1, PSN2 and a pXGrid node. Only the primary admin node shows the "Green" connected icon. When we check the status of the patch 5 on the individual nodes using "show version" in CLI it indicates it has the patch. The ISE admin node under Administration > Maintenance > Patch management shows all the nodes received the patch when we select it and display " Show Node Status".

 

We have checked the network connectivity and all is okay. All nodes can reach each other and there is no latency/jitter. DNS  is resolvable from all nodes by using nslookup. There is also no firewall in between to block communications.

 

When we removed patch five from one of the PSN nodes and reverted back to patch 4, there was still no change and the error "In progress" persisted.

 

What could be the issue?

2 REPLIES 2
Sheraz.Salim
VIP Advocate

check all the node NTP is syn to NTP server.

please do not forget to rate.

Yeah, Make sure both are synchronized with NTP, and if you still have issues then Deregister and add it back.

Content for Community-Ad