Cisco ISE Make HA with two ISE Nodes

[Shiraz Ali]

Hi,
We have 2 Cisco ISE and both are running separately as a standalone.

Primary ISE is running in our production network

secondary ISE is running free. No any services are running on it.

i am creating for HA-high availability between both devices, once i have created HA-high availability before checked FQDN only.

whenever the primary or secondary ISE node goes down, the Secondary ISE node will take up and all the services will be running??? . (Configuration, Administration & etc)

what about For the PSN role failover (authentication handling)

[balaji.bandi]

Yes you can do, from standalone to HA/ distributed deployment :

https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/admin_guide/b_ise_27_admin_guide/b_ISE_admin_27_deployment.html#typesofpersonas

All other questions of your wil be same, one of the node fails other PSN will give you high availability ( configure HA and test it each feature).

[Shiraz Ali]

we are facing this issue,

[UdupiKrishna]

Looks like a possible DNS issue. Are you able to perform reverse and forward DNS lookups from both ISE nodes to each other? If not, that needs to be fixed.

You can either use DNS server or add explicit ip host entries (don't recommend the latter)