topic Hybrid-Distributed - 3 Nodes in Network Access Control

Hybrid-Distributed - 3 Nodes

jmecklenburg — Mon, 21 Oct 2019 20:32:10 GMT

I'm thinking a ise deployment and I want use a "2-node deployment (redundant)" with a "node A" and "node B", and use a "node C" as standalone node for syslog or loggin.

Can use this deployment?

Regards.

Re: Hybrid-Distributed - 3 Nodes

Damien Miller — Mon, 21 Oct 2019 20:50:45 GMT

A three node deployment will work, but it's not a supported or tested deployment model.

Syslogs from PSN's are collected by the two monitoring nodes the deployment should have. Run everything on just two nodes if you fit within the scaling parameters.

Re: Hybrid-Distributed - 3 Nodes

Jason Kunst — Tue, 22 Oct 2019 07:05:10 GMT

its rather confusing what you're trying to do. an ise deployment consists of personas. any deployment must have at least 1 admin, 1 monitoring and 1 policy services. they can be installed on one node as a standalone. For redundancy you have another node that can run all 3, with secondary admin/mnt. Why would you need another node? you can only have 2 admin and 2 mnt in a deployment

youtube
https://www.youtube.com/user/CiscoISE

http://cs.co/ise-training

Perf and scale
https://community.cisco.com/t5/security-documents/ise-performance-amp-scale/ta-p/3642148

Please look at deployment models in admin guide as a start.
https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_new_chapter_011.html#ID15