10-11-2013 03:09 AM - edited 07-04-2021 01:03 AM
Hi,
I have two ISE-3315 Appliances in production network.
I need someone's help to explain, how to make the Secondary node as the primary admin note to reset-config.
And then I would like to know how to keep the license files and Certificate during the Upgrade.
Please help me to answer my questions.
Thanks
CSCO11872447
10-14-2013 08:26 AM
The Cisco Identity Services Engine (ISE) provides distributed deployment of runtime services with centralized configuration and management. Multiple nodes can be deployed together in a distributed fashion to support failover.
If you register a secondary Monitoring ISE node, it is recommended that you first back up the primary Monitoring ISE node and then restore the data to the new secondary Monitoring ISE node. This ensures that the history of the primary Monitoring ISE node is in sync with the new secondary node as new changes are replicated.
Please Check the below configuration guide for Secondary ISE- Nodes.
http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_dis_deploy.pdf
10-14-2013 08:06 PM
First you need to make sure both the primary and secondary are configured just as such. Then drop into the secondary's admin and then deployment and hit the drop down and make primary.
http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_dis_deploy.html#wp1145062
As for certs you need to export them from the servers before you upgrade ..
Sent from Cisco Technical Support iPad App
10-24-2013 02:12 AM
Thanks George..! Now I am trying with my spare unit in Stagging enviroment.
10-24-2013 02:15 AM
10-25-2013 03:31 PM
For Certificate management , use
http://www.cisco.com/en/US/docs/security/ise/1.2/installation_guide/ise_app_e_man_cert.html
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: