Failed AD integration with cisco ISE 2.6

[akash.tiwari]

Hi 

I am using ise 2.6 in my network i am integrating the AD server with ise not getting error network connectivity failed, although I am able to ping from each other. please let me know there is any misconfiguration or other reason to occur this problem. I am attaching a screenshot of that error. 

[Marvin Rhoads]

Check for SRV records in DNS for your domain controller. You can do that as follows:

nslookup
Set type=all
_ldap._tcp.dc._msdcs.mydomain.com

(Substitute your valid domain name in place of "mydomain.com".)

[Cristian Matei]

Hi,

    Based on the provided output, make sure that the DNS server that ISE uses points towards one of your Windows DNS Servers which are member of the domain you're trying to join. If it still does not work, look here in order to enable advanced debugs and provide more relevant output:

  https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/ise_active_directory_integration/b_ISE_AD_integration_2x.html#reference_5A63D203661E4E7CA353CDDC4F057CD8

    Basically, except the above statement, make sure ISE and your DC have time in sync (via NTP or manually), you have IP connectivity between ISE and DC.

Regards,

Cristian Matei.