topic ISE Configuration in Distributed Environment in Network Access Control

ISE Configuration in Distributed Environment

sachpednekar — Mon, 11 Mar 2019 02:39:57 GMT

Hi All,

I have quick questions about ISE deployment in Distributed environment, as i have purchased 2 X Cisco ise 3395 - For Data Center and 3 X Cisco ISE 3355 for remote location with 3500 Base licences and 500 Advance licences.

i have some questions on this deployment

i will install 1 3395 in Primary Datacenter and other 3395 in Our secondary Data center as Primary admin+Primary Monitoring and Secondary Admin+Secondary Monitoring

and each 3355 will get installed in Remote location as policy server, My Question is it this will be correct deployment?

or while configuring 3395 do i need to configure Policy server as well in addition to Primary admin and monitoring?

or please suggest me best deployment stratagy!

Thanks,

Sachin

ISE Configuration in Distributed Environment

Tarik Admani — Thu, 11 Oct 2012 17:16:26 GMT

Sachin,

How are all the sites connected (via MPLS) based on the equipment the customer must have a good WAN setup.

In most scenarios I usually position the the PSN at the central location anyways but it all depends on how the customer's network is configured.

thanks,

Tarik Admani
*Please rate helpful posts*

ISE Configuration in Distributed Environment

sachpednekar — Thu, 11 Oct 2012 17:59:20 GMT

Thanks for the reply,

all three sites are connected in MPLS with 100MB redundant band width

we are have 2 data center one is primary and other is secondary. and all client locations are connected with 100 Meg links where i am planning to install 3355 which will act as authentication server.

but now my question is

3395 - Primary Admin+Primary Monitoring - Primary DC

3395 - Secondary Admin+ Secondary Monitoring - Secondary DC

3355- will say for one remote location(PSN)

3355- Second remote Location(PSN)

3355- third Remote location (PSN)

thanks,

Sachin

ISE Configuration in Distributed Environment

Tarik Admani — Fri, 12 Oct 2012 03:56:37 GMT

Sachin,

i would suggest the following change:

3395 - Primary Admin+Secondary Monitoring - Primary DC

3395 - Secondary Admin+ Primary Monitoring - Secondary DC

Tarik Admani
*Please rate helpful posts*

Re: ISE Configuration in Distributed Environment

sachpednekar — Fri, 12 Oct 2012 13:49:01 GMT

Thanks I will do.

Can I get any installation document which is prepared at the time of real time implementation ? Like authentication and authorization policy config!

Step by step guide!

Sent from Cisco Technical Support iPhone App

ISE Configuration in Distributed Environment

vikasyad — Tue, 28 May 2013 00:14:17 GMT

Yes, your deployment is quite achievable & looks fine. Please review the below links which will assist you in deployment:

http://www.cisco.com/en/US/solutions/collateral/ns340/ns414/ns742/ns744/docs/howto_50_ise_deployment_tg.pdf

http://www.cisco.com/en/US/docs/security/ise/1.0/install_guide/ise10_deploy.pdf

http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_dis_deploy.html

ISE Configuration in Distributed Environment

harvisin — Sat, 21 Sep 2013 23:24:14 GMT

Hello Sachin,

The below mentioned links will hep you out:-

http://www.cisco.com/en/US/docs/security/ise/1.1.1/installation_guide/ise_deploy.html#wp1151366

http://www.cisco.com/en/US/solutions/ns340/ns414/ns742/ns744/landing_DesignZone_TrustSec.html

These two links will give you a fair idea !!