Cisco ISE Integration with Multiple Domains

[harshal.shahane]

Hello All,

Has anyone worked with ISE integration with Multiple domain without any form of trust relationship while using DNS of one of the domain?

Company A   Domain    CompanyA.local

Company B   Domain    CompanyB.local

DNS configured on ISE is of Company A, and integration with Company A's AD is successful.

When integrating with the Company B's AD ISE is throwing an error "LW_ERROR_FAILED_FIND_DC"

We tried creating a forward lookup zone on the but were not able to add all the SRV Locations as few of the options were not visible.

Please provide your experience with this deployment scenario.

Thanks in advance.

Regards,

Harshal

[oatroshc]

Docs say for ISE it's critical to have a time synchronised. What I did - set up NTP client on ISE, as well NTP client on Windows (good idea to use the same NTP source, as in my case) - and the service came up immediately.

Please don't forget to mark helpful posts.