cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

617
Views
15
Helpful
4
Replies
msompong1
Beginner

How to enable auto PAN failover on ISE 2.3

Hi All,

I'm running 2 VM of ISE 2.3 patch 6 with deployment mode as below

2021-01-10 19_33_19-Identity Services Engine.png

 

But once I've tried to enable the auto failover , I'm got the error below. What does it mean and how can I resolve this?

2021-01-10 19_34_42-Identity Services Engine.png

Thank you for all answer in advance.

1 ACCEPTED SOLUTION

Accepted Solutions
Rob Ingram
VIP Mentor

@msompong1 

Unfortunately, you cannot enable PAN auto failover if you only have 2 nodes in your deployment, you need a 3rd node to act as the health check monitor. You can still manually failover the PAN, or setup another node in the cluster so you can enable auto failover.

 

FYI, ISE 2.3 is end of support June 17th 2020, you should consider upgrading.

View solution in original post

4 REPLIES 4
Rob Ingram
VIP Mentor

@msompong1 

Unfortunately, you cannot enable PAN auto failover if you only have 2 nodes in your deployment, you need a 3rd node to act as the health check monitor. You can still manually failover the PAN, or setup another node in the cluster so you can enable auto failover.

 

FYI, ISE 2.3 is end of support June 17th 2020, you should consider upgrading.

View solution in original post

Mohammed al Baqari
VIP Advisor

Hi,

Your nodes are serving PAN and PSN roles. Hence its failing. You need to
disable session services and spin separate nodes for them.


***** please remember to rate useful posts

Hi Mohammed,

 

Thank you.

msompong1
Beginner

Hi Rob,

 

Thank you for your explanations. 

Content for Community-Ad