IPEP cant register to ISE 1.2

[Kabir Ibrahim]

I am trying to register an ipep to my primary ise running ise 1.2. Have installed certificates on the IPEP. The devices can ping each others dns names.  i keep getting the following error whenever i try to register the IPEP.

[anirudhkaushik]

Hi, r u having any firewall in between? Plz check rules or test with rule allowing IP between ISE nodes and ipep node

Sent from Cisco Technical Support Android App

[Kabir Ibrahim]

hello,

As i said I could ping between the nodes. Theres an application based firewall (palo alto ) in between the nodes. I managed to register the node once. had an issue reaching the ipep after deploying it in bridged mode so had to reimage it.

BR

[Bastien Migette · Accepted solution]

Hi Kabir,

Did you imported ISE Certificates in each other's node ? The command on the iPEP should be something like pep certificate import terminal (from memory) and you can copy paste base64 cert from admin node here. You need to export it as well using pep cert export or something similar;

[Kabir Ibrahim]

Thanks guys,