02-17-2016 06:57 PM - edited 03-10-2019 11:30 PM
I have a distributed ISE 2.0 deployment with 6 nodes (2 X PAN, 2 X MNT, 2 X PSN), there is no firewall in the middle. I have successfully added all 5 nodes into the PRI PAN and all the messages show successfully added for each of them.
However, after Sync, the Secondary PAN and PRI MNT's Node Status showing Yellow triangle and the "Registration Failed". The option "Syncup" is also disabled. All other 3 nodes show green square "Connected".
They have the same config and are added the same way. What could be the problem. Please help.
02-17-2016 07:19 PM
What version of ISE?
SSH to the CLI. Can you ping each node from each other?
Are there forward and reverse DNS entries for all nodes?
Are the timezones for all nodes the same and is the NTP server the same and all node times synchronized?
02-17-2016 10:16 PM
They are ISE 2.0. Network connectivity is all fine, ping or SSH no problem. I did miss DNS initially and ISE would not allow any node to be added without DNS. So I added DNS entries and they all got added successfully. But I do not have reverse DNS entries, not really sure if they are needed or not. They are all configured in the same timezone with same NTP servers. I will check the NTP status tomorrow.
02-18-2016 06:18 AM
If you have NTP and other basic stuff configured fine. You can quickly reload the Secondary PAN and PRI MNT. We could have looked at the logs but I'm sure the replication logging components were not set to DEBUG level.
~ Jatin
02-18-2016 06:19 AM
It's required for those DNS entries to be there. Not sure it is your problem, but definitely required.
Configure the Reverse DNS lookup for all Cisco ISE nodes in your distributed deployment in the DNS server. Otherwise, you may run into deployment related issues when registering Cisco ISE nodes, and restarting Cisco ISE nodes.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide