ISE admin and monitoring nodes replacement

[lwang]

Hey community gurus,

I am gonna replace two ISE admin nodes and two mnt nodes with new hardware model. Need some comments if the replacement process is correct. 

Regarding two admin nodes (ppan and span), I have no problem replacing the span first. But before replacing the existing ppan, do I need to remote the new span to ppan? and then after the new span (which is the old ppan) joins the cluster, I will promote the new span to be new ppan? 

Regarding two mnt nodes replacement, should I follow the same procedure as admin node replacement?  like promote smnt to pmnt and then replace old pmnt as new smnt, and then promite new smnt back to new pmnt? 

[Marvin Rhoads]

Your scheme of replacing and promoting nodes makes sense. Delete a node from the deployment and then add in the new one with the same version, patch and bootstrap configuration. It will sync from the current Primary PAN and then be eligible to serve whatever persona and roles you assign to it.

[przemyslaw.wieczorek]

Hi, I have similar situation but in medium deployment. So in my case I have 2 nodes with 2 personas on each - primary admin node / secondary MnT and secondary admin node / primary MnT. Process probably will look the same, but just want to confirm it. I’m going to as first delete secondary admin node / primary MnT, then add new node as Secondary Admin node, but MnT will be what - primary or secondary? When node will fully sync I’m going to promote it to Primary admin node and proceed with replacement of last node. It should work, but I’m not sure how MnT will react. Any clue?

[Arne Bier]

You can determine the role of the MNT prior to performing any of the replacement steps. Manually select the current Sec MNT to be Primary MNT - it will do so after a few minutes. The partner MNT will automatically set its role to Secondary. At least then, you have some deterministic behaviour.
The role of the MNT is not as crucial as the role of the Admin. You can flip these roles without any impact