cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

689
Views
0
Helpful
3
Replies
pethomas
Cisco Employee

ISE 2.1 High Availability when using Third Party NAD DNS/DHCP Redirection

Hi Guys

Looking through the (very useful) configuration guide (Configure Third-Party NAD Redirection on ISE 2.1 - Cisco) I see that the DNS/DHCP function is bound to a specific node in the ISE cluster

/*

The DHCP server pool is bound to a particular ISE node and its interface. Navigate to Administration > System > Settings > DHCP & DNS Services > Add

*/

Do we have any plans to provide any form of High Availability/DR capabilities to address a node failure in the cluster.  I understand the challenges associated with making multiple nodes, but given a customer could have a large number of sites, I've been asked if we can support a fast (say sub-30 minutes) failover between nodes in a cluster for this DHCP/DNS function?

Any plans or ways (eg scripting) we could use to provide higher availability?

Thanks

Peter

1 ACCEPTED SOLUTION

Accepted Solutions
Timothy Abbott
Cisco Employee

Hi Peter,

As you stated in your post, DNS/DHCP functionality is PSN specific in an ISE distributed deployment.  Today, there is no method for creating HA around this functionality.  While we can't discuss roadmap items in this forum, I'm confident it is something we are looking at for the future.

Regards,

-Tim

View solution in original post

3 REPLIES 3
Timothy Abbott
Cisco Employee

Hi Peter,

As you stated in your post, DNS/DHCP functionality is PSN specific in an ISE distributed deployment.  Today, there is no method for creating HA around this functionality.  While we can't discuss roadmap items in this forum, I'm confident it is something we are looking at for the future.

Regards,

-Tim

View solution in original post

pethomas
Cisco Employee

Thanks Tim

And just to confirm, is there no way we can move the role from one node to another today?  Case in point, I have two datacentres, and work is going to be carried out at one of the DCs, can I 'easily' move the role to a node in the other DC?  Or is it a case of having to 'destroy' the scopes on the original node, and then manually create them on a node at the other DC?

Cheers

Peter

Hi Peter,

Unfortunately, there is not automated way to do this today.  You will have to recreate them manually.

Regards,

-Tim

Content for Community-Ad