04-22-2024 10:21 AM - edited 04-22-2024 11:02 AM
I have an EVE-NG lab that consists of a Panorama, 1 FW, and 4 ISE nodes (see lab.jpg attached). The Lab ISE nodes are running 3.2 patch 5 and panorama and Firewall is running 10.2.7-h3. In reading the 3.2 and 3.1 admin guides they both state in the below
Further https://youtu.be/_aO6oZrYCPE?si=qNlpxHO8ECX2sSXV&t=751 states that Pxgrid stops working when the PAN goes down.
In my lab, I downed node-1 which is the primary pan (no automatic failover enabled) i expected to NOT see any new registered endpoints but i DO. Am i not understanding the Admin docs correctly?
04-23-2024 01:57 AM
Not a 100% sure, but based on my experience with pxGrid 2.0 everything would still work even when the primary PAN is down, however, I don't remember ever tested this thoroughly. Based on the documentation as you pointed out it seems to be required to have an active PAN in place for the new registrations to happen, so I'm wondering if there is kinda a timer that needs to get past before the new registrations stop happening? not sure!
04-23-2024 05:07 AM
I have a case open with TAC to see if what i'm seeing is expected and if so will request they update their documents.
04-25-2024 12:04 PM
Just got off the call with TAC. They acknowledged their public documentation is wrong and will get it fixed. With that said, it's pretty clear that not even internal TAC documentation is correct as we were able to disprove their internal documents as well. The engineer is going back and will discuss internally.
04-29-2024 01:33 PM
Ok so its turning out to have nothing to do with a PAN at all. As long as you have both a M&T and a pxgrid node available online, pxGrid services will continue to function (for new and existing sessions). The interesting thing is that for ip to sgt mappings, the PSN's update the secondary M&T with data which then pushes it out to available pxGrid Nodes. More to come.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide