MAR Cache Distribution Enable

[rhuel.phils]

Hi All,

Just want to confirm if you enable the MAR cache distribution, will it require the ISE services to restart?

How to have visibility of two server that MAR distribution are done? anyway to confirm?

We have two server PRIM and SEC. our current version is 2.6 patch 7

[Francesco Molino]

Hi
Enabling MAR won’t restart your services.
There’s a log file calledtracking.log you can look at normally which will start filling up when MAR is enabled

[poongarg]

Adding to above, enable below components at debug level on ISE node from Administration > System > Logging > Debug Log configuration, to have detailed information:
Cache Tracker, Notification tracker and Replication tracker, Runtime-AAA

Later check the tracking.log, prrt-server.log and prrt-management.log as shown below:
show logging application tracking.log

[Damien Miller]

Review the caveats for MAR cache as well. I would strongly suggest looking at EAP chaining with EAP-FAST or EAP-TEAP (2.7 /w Win10 b2004+) over using MAR.
https://www.cisco.com/c/en/us/support/docs/lan-switching/8021x/116516-problemsolution-technology-00.html
https://www.wiresandwi.fi/blog/mar-cache-in-ise-and-why-it-sucks