pxGrid 1.0/2.0 Questions

[dyuen001]

We are running ISE 2.4 P11 and have Plus and Apex licenses.  We are using external CA but I do not think we have any certificate issue.  We also have two (2) dedicated pxGrid personas.  How do I know pxGrid is running 1.0 or 2.0.  Does ISE 2.4 automatically run psGrid 2.0?  I think it's using pxGrid 1.0 because I saw somewhere it used port 5222.

[Damien Miller]

If you have the pxgrid persona enabled, then as of 2.4 pxgrid 2.0 will be active/active on all pxg nodes. Both of your nodes will be able to handle pxg 2.0 requests at the same time.

On the other side, pxgrid 1.0 is only active on a single node at a time, and the failover between them requires services to restart after detecting the other node is down.

You have two methods of determining which pxgrid nodes is active and which is standby with pxg 1.0.
1. logging in to the CLI of your pxgrid nodes and issuing a "sh application status ise". The pxg 1.0 active nodes will have the four pxg services running. The standby/secondary will have the four pxg services sitting in the disabled state.
2. From the GUI, navigate to https:/<your admin node ip>/admin/#administration/administration_messageservice and at the bottom in green it will indicate which node is active/standby for "xmpp" aka pxgrid 1.0.

[dyuen001]

I noticed what you said is correct.  Can I or How do I get it to run pxGrid 2.0 on my ISE 2.4 P11?  Thanks.

[Damien Miller · Accepted solution]

PXGrid 2.0 is running by default on any node you enable the pxgrid persona on, there are no additional steps to enable it. You'll have to ignore the four CLI pxgrid services since those are pxgrid 1.0 specific.

It's up to the application integrating to choose if it leverages pxgrid 1 or 2 since it requires very different application calls.

You can see pxgrid 2.0 clients from the "web clients" tab on this link again.
https://<ise admin node ip>/admin/#administration/administration_messageservice

[dyuen001]

Thank you.