ISE Question

abhishekclub143 — Mon, 11 Mar 2019 03:54:45 GMT

In ISE, For the Guest server, can a second NIC interface be used to physically connect the guest interface to a DMZ? If so, can you provide a link?

Ravi Singh — Thu, 19 Sep 2013 22:33:58 GMT

Running Guest off of another interface has not been tested thus it

is not officially supported. You will have the best chance running

Guest on Gig1 and your Profiler collection probes on Gig2 or Gig3.

Another problem with moving guest portal to a second interface

is that there is currently no option to set a separate management and

guest certificate. The management certificate is required to be

generated to the hostname of ISE. That means you would have to have

your users in the DMZ get a DNS response for gig1 and the internal

subnets get a DNS response of gig0 for the same hostname. I believe

this is the main reason we do not support moving the guest portal off of

gig0 at this time.

topic ISE Question in Network Access Control