Moving MnT from one ISE appliance to another.

[Anthony O'Reilly]

Hi,

I have two ISE appliances in my deployment. The first ISE appliance is the primary node for Admin and Monitoring.

I want to move MnT to the second ISE appliance. Does this cause both ISE appliances to reboot? If only one ISE appliance reboots, which one reboots (first or second). I am trying to maintain service as much as I can during this change.

Thanks

[hslai · Accepted solution]

An ISE node will restart its services when the persona(s) change. I would suggest adding MnT as the primary MnT on the 2nd ISE. For the 1st ISE, remove the MnT persona in a maintenance window.

[Anthony O'Reilly]

Thanks @hslai do this mean when I am moving the MnT to the secondary node, the secondary node do not restart its services. Only the primary mode will restart it services.

[hslai]

If the 2nd ISE has no MnT and you add MnT to it, the 2nd ISE will restart its ISE services. If the 2nd ISE is serving other ISE services (esp. session services), please also do it in a MW. Changing ISE MnT roles between primary and 2nd will not restart ISE.

[Anthony O'Reilly]

Hi @hslai I made this change and the service outage was about 7 minutes. No issues afterwards. thanks for your help.

[Ethan Grinnell]

Adding my experience: We have a similar setup, 2 ISE nodes, one is primary PAN and MnT and the other is secondary PAN and MnT. I swapped MnT priority between the 2 nodes. Now the primary PAN is the secondary MnT. No restart was triggered for this change. The difference may have been that both nodes already had MnT persona and I was only changing which was the primary.

[oumodom]

Hi @Anthony O'Reilly  @hslai @Ethan Grinnell 

I have the same scenario as mentioned on lab as we have 2 nodes configure as Deployment nodes,
Currently our PAN is secondary M&T, while secondary node is primary M&T. The objective is to change role PAN to primary M&T for Operational Backup and Configuration Backup.

Once we click change the role Primary M&T on PAN node,  Does it require restarting both nodes or just restarting service?  They will be down time both nodes ?
We need to ensure the operation/authentication no downtime. 

Thank you, 
 

[JPavonM]

Node service restarts only happen when you change from one persona to another (like from monitor-2-administration or psn-2-monitor, or viceverssa) but not when you swap primary and secondary roles.

[oumodom]

Thank @JPavonM  for sharing your experience