07-04-2019 06:05 AM
Hi Experts,
In my lab I had setup and entire dsitributed cluter with one each of the nodes (Primary and secondary PAN, primary and secondary Motioning, and a PSN)
Now when I tried to remove the primary monitoring node (after removing the secondary monitoring), an error was thrown, stating that there needs to be at least one monitoring node in the cluster.
But, when I removed the the only PSN from the cluster, there was no such error or warning given?!
Is this something by design? Or am I doing something wrong?
It all stems to the lab that I have setup and noticed this, not sure if this by design or if missing out on something?
Solved! Go to Solution.
07-04-2019 07:00 AM
07-04-2019 07:00 AM
07-04-2019 01:42 PM
07-04-2019 09:24 PM
Hi mate,
The reason for this is that ISE doesn't have a concept of Primary or Secondary PSN.
It is the NAD that dictates which ISE to go to first as primary or secondary.
If you check on the ISE Deployment, The "Roles" of PRI - primary or SEC - secondary is for (A) - admin or (M) - monitoring.
You will never see that on PSN Role.
Cheers,
Raffy
07-08-2019 01:03 AM
If there are no other PSN in the cluster, then in that scenario, it is possible for the PAN to process the authentication requests?
If the NAD is pointed to the PAN in the cluster?
07-10-2019 09:32 AM
Yes, if the admin node(s) enabled with session services.
07-16-2019 01:39 AM
Thank you guys! I think this has resolved my query...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide