ISE HA Reboot Procedures

[Quintin.Mayo]

Hi,

Our ISE is in a HA setup (primary and secondary). Which one do we shut down (reboot) first? Second, is there a reboot button the ISE web interface to initialize the reboot or is it a CLI command only? Is there any documentation that explain this process please provide link? Any assistance would be greatly appreciated.

Thanks,

[Damien Miller · Accepted solution]

You won't be able to do it from the GUI, CLI only.

The order you reboot them in depends on what you are trying to accomplish. If you are patching, then the best practice is to patch the primary admin node first, then the order of your choosing following that. When reloading your nodes for any reason though you need to be aware of the items unavailable during the time the primary PAN is down.
https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_new_chapter_011.html#ID59

The generally recommended best practice for reloads is to issue "application stop ise", then "reload" (or halt if you want to power off pre vmotion). The order you reload the nodes in is not important from a deployment perspective, only feature outage planning.