Cisc ISE 1.1.3: PS not shown in Admin Node and no live authentications

[Mubasher Sultan - 2x CCIE # 20149 (R&S | Sec)]

Dear folks,

I have a distributed deployment of ISE. 4 Applicances, two are Admin and Monitoring while remaining two are Policy Server.

Policy Nodes are showing down... But, actualy they are running and working fine. Clients are being authenticated.

I checked the services "show application status ise", all are fine.

Any thoughts...

Thanks,

Regards,

Mubasher Sultan

[Philip Vilhelmsson]

Do you have a firewall between your nodes?

[msonnie]

I believe that the following link would help you with your query.

http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_troubleshooting.html#wp1035890

Moreover, I feel that there could be various reasons for this kind of issue, as in:

1. Incorrect System time and NTP server settings
2. The server certificate operations have not been performed directly on each individual node
3. The switch is not transmitting RADIUS accounting packets (attributes) to the RADIUS server.

The above three maybe a reason, please check and revert if they actually are the reason for PSN to be down.