Generating license for ISE high availability primary/secondary nodes

We have two ISE servers that will act as primary/secondary in a high availability setup.
The ISE 1.0.4 installation guide, page 93, mentions that "If you have two Cisco ISE nodes configured for high availability, then you must include both the primary and secondary Administration ISE node hardware and IDs in the license file."
However, after entering the PAK in the licensing page, the only required fields are:
- Primary Product ID
- Primary Version ID
- Primary Serial No
In this case, how can i include both primary and secondry HW and IDs?
Thanks in advance.

I am refering you a Cisco ISE Nodes for High Availability configuration guide, Please check:
http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_dis_deploy.html#wp1128454

Similar Messages

How to generate license for AIP-SSM without PAK-number?

Hello! I’m sorry for my English. I have a problem with generating license for AIP-SSM. My contract with SMARTnet service is activated, but I don’t have a PAK-number. How I can generate a license for updating my module?

Alternatively you can always write an email to [email protected] with your serial number and they should be able to provide you the license for any cisco device.
Sachin

ISE High availability

HOw to configure ISE 1.2 in a High Availability environment.

Have you gone through this docuument?
Setting Up Cisco ISE in a Distributed Environment
http://www.cisco.com/en/US/docs/security/ise/1.2/user_guide/ise_dis_deploy.html
~BR
Jatin Katyal
**Do rate helpful posts**

Windows NLB for SPF high availability

I have SPF in my organization as a bridge between VMM and WAP. One of my design tenants is to configure everything in a high availability configuration and I am having trouble getting SPF to work in an HA environment.
If I set the binding on SPFs website to the NLB name and use the certificate that I have for it, WAP is unable to write anything to the SPF database. If I set SPF back to no binding and use the certificate that is created for the machine itself, WAP
works exactly as it should.
The NLB that I am using is windows NLB and I have it configured in unicast /w all ports being forwarded to the SPF server. I have just one NIC per server on my SPF instance.
I understand that SPF is supported and have configured it using this guide... (link: http://www.hyper-v.nu/archives/mvaneijk/2013/06/system-center-2012-sp1-service-provider-foundation-high-availability/) It works from the server to the VMM server (using
the web test as prescribed) but gets an error 12 that references the provider section of the site when I try to create the SPF connection from WAP.
Does anybody have any ideas?

thank you for the prompt reply. The certificates that I am using are created by my enterprise CA which is automatically trusted by my WAP servers. The servers all get a client/server authentication certificate as part of AD's auto-enrollment.
I have created a custom certificate with just the name of the NLB. Do i need to specify the actual server names of the SPF environment as SAN's in the certificate request? Could that be the problem?
Single server SPF uses a certificate that is trusted with the single server name
NLB environment uses a custom request certificate that has client/server EKU and the only name that is registered is the DNS name of the NLB's IP address. This is the same name that I put in the binding for the spf website on my SPF servers.
(this method is broken)

I'm looking for Failover/High available solutions for IPS 4200 Series

Hi all,
I tried to find out Failover/High available solutions for IPS 4200 series,I didn't saw failover solutions in IPS guide document. Anybody can be help me!

I do not know if this is documented anywhere, but I can tell you what I do. As long as the IPS 4200 has power, with the right software settings, the unit can fail such that it will pass traffic. Should the unit loose power, it does stop all traffic. I run a patch cable in parallel with the in line IPS unit, in the same VLAN, with a higher STP cost. Thus all traffic will traverse the IPS unit when possible, but should something happen to it, a $10 patch cable takes over.
Mike

Scale out question: how does instance name affect primary/secondary node

Hi:
OBIEE 11.1.1.6.4, Windows 2008
On a test instance the following happened:
1. Enterprise install of OBIEE 11g had problems
2. Reinstalled OBIEE 11g, but the installer created an instance2
3. All was well with this install
4. Performed all necessary shared catalog and RPD steps
5. On a second server, installed OBIEE 11g using the scale-out option
6. On second server, this created an instance1 directory
7. All components start up and we can log into OBIEE using either server1 or server2
Question:
Does OBIEE use the instance names in a scale-out? Our primary node is instance2 and the secondary node is instance1, though on a separate server. Will this cause a problem?
Thanks for any help.

Hello,
This can be run on any of the replicas that the availability group participates in to return the primary instance:
select primary_replica FROM sys.dm_hadr_name_id_map nim
inner join sys.dm_hadr_availability_group_states ags
on nim.ag_id = ags.group_id
WHERE nim.ag_name = 'MyAvailabilityGroupNameHere'
Sean Gallardy | Blog | Microsoft Certified Master

Volume licensing for Lion in a business (50 nodes)?

So based on this article: http://osxdaily.com/2011/06/17/mac-os-x-10-7-lion-volume-licensing-info-for-educ ation-business-customers/ We should be able to go to the Apple Store Business site and purchase a volume license. The link on that page redirects me to the App Store and the same place you go as a regular home user. There is also a Volume license link about mid page but only has Snow Leopard as an OS choice. Is Apple just not on the ball in terms of getting their site updated to support this?
This is really frustrating to say the least.

Good Afternoon,Ive been trolling the forums and found an older thread that kinda tounched base on it but never got around to the nitty gritty so I decided to start a new one to get the groups consensus and to also pull the VMware rep out of hiding. I sent him a few PMs without a response.I would like to get some sort of virtualization lab set up at home. I have a dedicated r710 now running the freebie esxi license you get after you register. Its working for the moment but I cant login through its webpage cause it only works with vcenter. I would also like to expirement a little further with Horizons View environment and pushing VDI to some thin clients (im terrified of CryptoWall and I know my kids would love to destroy my movie library). Plus we use all this technology at my work and would like to freshen up since Im a hyper-v guy by...
This topic first appeared in the Spiceworks Community

Floating License for Vivado and ISE

Hi
I am currently working on generating the bit file for Spartan 6 XC6SLX150. It was mentioned that Evaluation version of Xilinx and Vivado does not support this particular part number. Therefore we happened to get a floating license for Vivado. It was mentioned that once the Vivado license is upgraded the Xilinx ISE would be updated and the part number will be available in Xilinx to generate the bit file. The software was set up in window 8. After the installation procedure was completed the license was not updated. Any insight on this
Regards
Sukaniyaa

Hello ,
Starting from Vivado 2014.2, new Edition purchases will receive two license entitlements, a certificate-based entitlement that may be used with ISE 14.7 or previous versions, and an activation entitlement for Vivado tools. Earlier to 2014.1, tool
subscribers used to receive a single certificate license that enabled both ISE and Vivado.
So if you have purchased new Vivado Design Suite (2014.2 or later), you will also get license for ISE which doesn't need to be updated since ISE 14.7 is the last version of ISE and no further versions will be released.

Can I use ISE demo license for wireless purposes???

Hi all.
We want to try an ISE deployment with one or two WLC and the license twe want to use initially is the demo embedded in the ISE appliance. We don't know whether we can do it because demo license covers base and advanced capabilities but not wireless (at least in administration/licensing this box shows "not installed" leyend) and we don't know whether a demo tape of wireless solution will work with this type of licensing; if not, is it possible to get a demo wireless license for ISE?
Thanks.
Best Regards.

The evaluation license does cover the wireless. Its actaully a full license.
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered"

Question on replication/high availability designs

We're currently trying to work out a design for a high-availability system using Oracle 9i release 2. Having gone through some of the Oracle whitepapers, it appears that the ideal architecture involves setting up 2 RAC sites using Dataguard to synchronize the data. However, due to time and financial constraints, we are only allowed to have 2 servers for hosting the databases, which are geographically separate from each other in prevention of natural disasters. Our app servers will use JDBC pools to connect to the databases.
Our goal is to have both databases be the mirror image of each other at any given time, and the database must be working 24/7. We do have a primary and a secondary distinction between the two, so if the primary fails, we would like the secondary database to take over the tasks as needed.
The ability to query existing data is mission critical. The ability to write/update the database is less important, however we do need the secondary to be able to process data input/updates when primary is down for a prolonged period of time, and have the ability to synchronize back with the primary site when it is back up again.
My question now is which replication technology should we try to implement? I've looked into both Oracle Advanced Replication and Dataguard, each seems to have its own advantages and drawbacks:
Replication - can easily switch between the two databases using multimaster implementation, however data recovery/synchronization may be difficult in case of failure, and possibly will lose data (pending implementation). There has been a few posts in this forum that suggested that replication should not really be considered as an option for high availability, why is that?
Dataguard - zero data loss in failover/switchover, however manual intervention is required to initiate failover/switchover. Once the primary site fails over to the standby, the standby becomes the primary until DBA manually goes back in and switch the roles. In Oracle 10g release 2, seems that automatic failover is achieved through the use of an extra observer piece. There does not seem to be anyway to do this in Oracle 9i release 2.
Being new to the implementation of high-availability systems, I am at somewhat of a loss at this point. Both implementations seem to be a possible candidate, but we will need to sacrifice some efforts for both of them also. Would anyone shine some light on this, maybe point out my misconceptions with Advanced Replication and Dataguard, and/or suggest a better architecture/technology to use? Any input is greatly appreciated, thanks in advance.
Sincerely,
Peter Tung

Hi,
It sounds as if you're talking about the DB_TXN_NOSYNC flag, rather than DB_NOSYNC.
You mention that in general, you lose uncommitted transactions on system failure. I think what you mean is that you may lose some committed transactions on system failure. This is correct.
It is also correct that if you use replication you can arrange to have clients have a copy of all committed transactions, so that if the master fails (and enough clients do not fail, of course) then the clients still have the transaction data, even when using DB_TXN_NOSYNC.
This is a very common usage scenario for Berkeley DB replication/HA, used to achieve high throughput. You will want to pay attention to the configured ack policy, group size setting, setting of the 2SITE_STRICT option (if group size == 2).

TREX High availability

Hi,
We used virtual host name for our production TREX server. We used the instruction as per the installation guide. It is up and running now. I am setting up the TREX high availability in a different server using Veritas cluster service. The production node is down and the HA system is now mounted with the production file system. Is there any instruction on how to setup TREX HA?
Thanks,
RT

Hi RT,
I do not know about the context "Veritas Cluster".
Otherwise, for TREX high availability, please check:
[http://help.sap.com/saphelp_nw2004s/helpdata/EN/46/c1aec67b4f1826e10000000a1553f6/frameset.htm|http://help.sap.com/saphelp_nw2004s/helpdata/EN/46/c1aec67b4f1826e10000000a1553f6/frameset.htm]
Best, Karsten

SAP POS - Xpress Server High availability

Dear All,
I have a requirement for Installing "High Availability" for SAP POS XPS server (Store server), Transnet server, & Transnet client.
I have gone thru the possibilities of having Backup server for XPS store server, but the backup server supported by SAP has some major restrictions listed below.
1. Store closing
2. Terminal Closing
3. EOD ( End of the day)
4. Exchange with reciept
5. Layaway sale.
Please let me know whether their is a possibility for achieving high availability for store server which performs the above listed transactions too.
Appreciate if any body can reply asap.
Best regards
Syed

Hello Syed,
Having High Availability for an Xpress is not standards SAP implementation and is quite u201Coverkillu201D. The use of the backup server is designed to allow the store to function and service itu2019s customers until a server can be rebuilt or repaired.
BTW:
-Layaways can be done in offline mode and it will post to the server when it becomes available
-Returns can be done on the backup server if the customer implemented Returns Authorization

Highly available sendmail

I note that the SC3.1 Release Notes state:
Sun Cluster software currently does not have an HA Data Service for the sendmail(1M) subsystem. It is permitted to run sendmail on the individual cluster nodes, but the sendmail functionality will not be highly available, including the functionality of mail delivery and mail routing, queuing, or retry.
Can a data service for sendmail be created, or is there something inherent in either sendmail or SC that prevents this? If so, what solutions exist for a highly available sendmail configuration that will not leave any queued messages in limbo?
Thanks,
Brian

>
Can a data service for sendmail be created, or is
there something inherent in either sendmail or SC that
prevents this? If so, what solutions exist for a
highly available sendmail configuration that will not
leave any queued messages in limbo?You create a redundant sendmail service by setting up several of them.
DNS MX records ( Mail eXchange ) provides fallback routes and even load sharing
between several sendmail servers. it is far too expensive to build a sendmail
cluster service when you can solve the problem with two or three V100 ultrasparc II
servers.
//Lars

High Availability Solution (TAF)

Hi
There is a requirement to setup an environment that provides high availability. 2 nodes are provided for the same purpose. System downtime is not acceptable. Following are the details.
OS :Windows Server 2003 Enterprise Edition
DB : Oracle 10g Rel. 2
Storage : NAS
App : Oracle Forms 6i (Client Server) & ASPs
Solutions were to implement RAC or Oracle FailSafe but I don't think they are supported on NAS. Also with Oracle FailSafe there will be downtime for the time failover happens. SAN cannot be arranged and the requirement is immediate.
Any help will be appreciated.
Best Regards
Abbas

Thanks forbrich
Do you know any specific doc that describes the installation and configuration steps of 10g RAC on NAS? If possible, can you provide some link that I could use to perform this task?
I have done RAC installations on SAN without any problems and its something I'm fairly experienced with. With NAS I am not really comfortable since I can't seem to find any documentation that describes step by step installation procedure or guidelines for that matter.
Thank you for your input
Best Regards
Abbas

AGPM High Availability / Fault Tolerance

I’m looking for any informations about Advanced Group Policy Management (AGPM) High Availability / Fault Tolerance.
The most interesting is that, in introduction for AGPM Planning Guide is described section about
Planning for AGPM high-availability and improved fault tolerance, but content not exists.
Microsoft MVP: Virtual Machine | http://blog.porowski.pro |
http://VirtualizationGeek.PL

Hi,
You may type the key words into the bing of TechNet website to search for the information you need. According to my search,
the following two links inlcude the detailed information regarding AGPM. But less information regarding AGPM High Availability / Fault Tolerance can be found from TechNet website.
Advanced Group Policy Management 4.0 Documents
http://www.microsoft.com/downloads/en/details.aspx?FamilyID=58FD6CDA-0210-4DA0-91D2-8C3CC2817DF8&displaylang=en
Advanced Group Policy Management
http://technet.microsoft.com/en-us/library/dd420466.aspx
Based on the current situation, I will also submit a feedback to Microsoft through our internal channel and requst more contents regarding
AGPM High Availability / Fault Tolerance to be published. While we cannot guarantee that these contents will be added, we would like to ensure you that we will make every effort to see that they do.
Arthur Li
TechNet Subscriber Support
in forum
If you have any feedback on our support, please contact
[email protected] .
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Generating license for ISE high availability primary/secondary nodes

Similar Messages

Maybe you are looking for