Changing Name Server on Cisco ISE 1.2 Deployment

If you ever experience DNS resolution failure on Cisco ISE with Active Directory integration, it could lead to AD being disconnected, and every authentication against AD will be dropped (RADIUS Request Dropped).

We need to make sure that ISE can ping to the DNS server and change the configured name server to that DNS.

Here is the captured image from the DNS resolution failed alarms:

It could be a little bit tricky as we need to remove DNS 1 and (if any) DNS 2 before adding the name server to the list.

If we don’t do that first, our new name server IP address will be placed last in the list, which means ISE will query the first name server before reaching the next name servers.

We can add up to 3 DNS servers into ISE deployment. So here are the steps:

To change the name server, we need to check the name server configured on ISE with the command “show run | in name-server”

Then we need to remove the name servers configured. If we just want to add the third name server, we don’t need to remove the first two name servers.

Do not restart ISE, we will restart ISE after we provide the correct name servers

After that, ISE will restart. Restart duration depends on the hardware resources allocated for ISE. To verify all processes are running well after restarting, we can check with the command

During the restart process, we can ping the server, but because ISE Application Server is not running, we cannot access the ISE GUI until it is running.

Make sure the name server is already changed to the correct ones.

This method should also work with other ISE versions, I have tried to version 2.x as well, as for version 3.x, I didn’t have any opportunity to test yet.

Hope this helps and is informative, thank you for reading. You may find the resources here.

Install Automation Tools on Ubuntu 16.04
Network Automation Lab – Initial Setup

Leave a Reply

Your email address will not be published / Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.