Migrate monitoring from ISE primary\secondary nodes to its own dedicated node

[darrjamis75328]

Hello all.

Our organization has a ISE virtual deployment consisting of primary\secondary with both handling monitoring persona (active\standby). We will be adding tacacs "device admin lic." to the deployment as we decommission ACS. In an effort to optimize performance, we're looking to offload monitoring from the primary & secondary, and move that persona to its own dedicated node.

Questions:

- What would be the best practice (sequence) used to implement this transition?

- After joining the new node with the dedicated monitoring persona to the deployment, will a reload be necessary?

- Are there any gotcha's that I should be aware of prior?

- The sequence I have come up with currently, is to 1.) join the new node to the deployment 2.) activate the monitoring persona on the new node 3.) remove monitoring from both the primary and secondary nodes.

Please advise ....

Thank you in advance for your assistance

[Colby LeMaire · Accepted solution]

The process is pretty straightforward.  The only restart of services would be on the new node you are adding.  Also, if you need the historical data/logs on the new node, you will have to do an operational backup on the current primary MnT and then restore the data to the new node.  But if you don't need it, then no need to worry about that.

[darrjamis75328 · Accepted solution]

Thank you Colby!!