ISE MNT Node Failure

[JP_Berlin]

Hi everyone,

what are the expected consequences of a ISE MNT node failure in an ISE distributed deployment (Version 2.x)? To my understanding this should not impact PAN or PSN behaviour. Is this correct? Are there other factors to take into account?

Thanks,

Jonathan

[Jason Kunst · Accepted solution]

You’re correct

Just logging will stop and you won’t be able to see reports and logs via the PAN since it’s a cross launch

Would recommend having HA and promote the secondary

[hslai]

Certain ISE features, such as PassiveID and license counts, rely on a working M&T node. Best to have a standby M&T, as Jason suggested.

[paul]

Also remember the pxGrid side of things.  Several of the integrations with ISE use a combination of pxGrid and ISE REST API calls.  For example, FMC gets data from pxGrid as well as session data from API calls to the MNT node I believe.  Correct me if I am wrong on that.