De-Register PSN from Deployment when Application ISE Stopped on PSN

[aarav]

Hi ,

Can we De-Register a PSN-2.2old, when we have manually stopped the ise application on the PSN-2.2old for testing purpose? The reason for this is explained below in a scenario.

Scenario: This will be the last PSN-2.2old on the 2.2 deployments and a New 2.7 Deployment is running a newly build PSN-2.7New. And this PSN-2.7New needs to be tested in production by servicing the endpoints.

And once this PSN-2.7New is Alive, we want to temporarily STOP the PSN-2.2old from Production, to evaluate the PSN-2.7New functionality.

And if PSN-2.7New is functioning as expected and certified for production, we would like to De-Register the PSN-2.2Old without bringing it back to production?

Is it possible or is there a better way of addressing this scenario?

Thanks in Advance...

Aarav

[Damien Miller · Accepted solution]

Most important here, you can't join an ISE PSN running 2.7 to a deployment/PAN running 2.2. Not entirely clear if that was part of your process but wanted to make sure.

As for deregistering a node that is offline, this will succeed in the GUI whether the node is reachable/online or not. It will require a "application reset-config ise" to rejoin to the deployment.

[aarav]

Thanks, Damien,

I'm aware fo that PSN-2.7New is a Parallel New Deployment that was built to rollout the old 2.2 environments.

Thanks for your confirmation, the PSN Node can be decommissioned even the application ISE is in a STOP state on that PSN.