pxGrid Services on two node cluster

[Wes Schochet]

Hi All-

I have a two node ISE cluster ver 2.7 SP2.  I will be using this for a DNAC deployment. 

Node 1 is Primary Admin, Secondary Monitoring

Node 2 is Secondary Admin, Primary Monitoring

Both nodes show personas of "Administration, Monitoring, Policy Service, pxGrid". 

When I look at the application status, the pxGrid services on node 1 show disabled.  Is this normal / expected?  I am not experiencing any problems, just curious why the services show disabled?

[martin.fischer · Accepted solution]

Hi @Wes Schochet 

Yes, this is the intended behavior. The service will be active only one node at a time. The other node will start the services if an issue with the active node is discovered.

From: https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/admin_guide/b_ise_27_admin_guide/b_ISE_admin_27_pxgrid.html 

"On the active Cisco pxGrid 1.0 node, these processes show as Running. On the standby Cisco pxGrid 1.0 node, they show as Disabled. If the active pxGrid 1.0 node goes down, the standby pxGrid node detects this, and starts the four pxGrid processes. Within a few minutes, these processes show as Running, and the standby node becomes the active node."

[Wes Schochet]

Great - thanks!

[Jason Kunst]

pxGrid 1.0 (shouldn't be used any longer) will run active standby for XMPP and not web clients (STOMP) pxGrid 2.0 runs active/active. ISE 3.0 has pxGrid 1.0 in maintenance mode. pxGrid is being required on any new integrations and DNAC has been using pxGrid 2.0 all along. 

https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/release_notes/b_ise_30_rn.html#Cisco_Concept.dita_9f050957-ae34-4c14-a154-f6e71cab67cc

[Mike.Cifelli]

To add additional info to @martin.fischer response:

You should see the use of Pxgrid 2.0 after integration. Under Pxgrid services in ISE, once you integrate DNAC and ISE you should see a subscriber from DNAC that appears as offline, and should remain offline by default.  If you toggle over to 'web clients' tab you should see corresponding dnac client names/entries appear as status ON.  You can verify integration via both in ISE and in DNAC under system360.  For integration guidance see section (Integrate Cisco ISE with Cisco DNA Center): https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/1-3-3-0/install_guide/2ndGen/b_cisco_dna_center_install_guide_1_3_3_0_2ndGen/b_cisco_dna_center_install_guide_1_3_2_0_M5_chapter_0111.html#tas...

Additional pxgrid info: https://developer.cisco.com/docs/pxgrid/#!introduction-to-pxgrid-2-0/introduction-to-pxgrid-20

HTH!