How to send notification email when ISE Primary PAN is down assuming manual failover?

[Grendizer]

How to send notification email when ISE Primary PAN is down assuming manual failover? Is the below config doing the trick?

a) Administration > System > Settings > SMTP Server

b) Administration > System > Settings > Alarm Settings > Replication Failed > Edit > Enter multiple e-mails separated with comma

c) Administration > System > Settings > Alarm Settings > Replication Stopped > Edit > Enter multiple e-mails separated with comma

is this config will be pushed to secondary PAN and when noticing the Primary PAN is down will send email?

[Craig Hyps]

Some functions will not function correctly while Primary PAN is down, such as creation of new guest account from PSN.  Be sure to promote Secondary PAN either manually or automatically via tertiary health check node.

/Craig

[Grendizer]

Thanks Craig, but if i don't have tertiary health check node and i only have two nodes which i need to do the failover manually how can i get a notification email when Primary PAN is down so i can promote the Secondary PAN as soon as possible, is this possible?

[Craig Hyps · Accepted solution]

Automatic failover requires > 2 nodes today.  Background is that if monitor is on PPAN itself, then failure of PPAN also fails checker, and monitor on Secondary PAN will not detect network connectivity issues leading to potential Active/Active and split brain operation.  To request change to this or allow checker to run on server other than ISE server, then please work with account team to raise enhancement.

In 2-node setup, SNMP monitoring tools as well as scripted API could run queries to detect server state to alarm admins of need to promote Secondary.

Craig

[Grendizer]

Thanks Craig...