Moving MnT from one ISE appliance to another.

[Anthony O'Reilly]

Hi,

I have two ISE appliances in my deployment. The first ISE appliance is the primary node for Admin and Monitoring.

I want to move MnT to the second ISE appliance. Does this cause both ISE appliances to reboot? If only one ISE appliance reboots, which one reboots (first or second). I am trying to maintain service as much as I can during this change.

Thanks

[hslai · Accepted solution]

An ISE node will restart its services when the persona(s) change. I would suggest adding MnT as the primary MnT on the 2nd ISE. For the 1st ISE, remove the MnT persona in a maintenance window.

[Anthony O'Reilly]

Thanks @hslai do this mean when I am moving the MnT to the secondary node, the secondary node do not restart its services. Only the primary mode will restart it services.

[hslai]

If the 2nd ISE has no MnT and you add MnT to it, the 2nd ISE will restart its ISE services. If the 2nd ISE is serving other ISE services (esp. session services), please also do it in a MW. Changing ISE MnT roles between primary and 2nd will not restart ISE.

[Anthony O'Reilly]

Hi @hslai I made this change and the service outage was about 7 minutes. No issues afterwards. thanks for your help.

[Ethan Grinnell]

Adding my experience: We have a similar setup, 2 ISE nodes, one is primary PAN and MnT and the other is secondary PAN and MnT. I swapped MnT priority between the 2 nodes. Now the primary PAN is the secondary MnT. No restart was triggered for this change. The difference may have been that both nodes already had MnT persona and I was only changing which was the primary.