topic Thanks Marvin, very useful in Network Access Control

ISE Distributed Deployment with Dedicated SXP servers

Steve Sewa — Mon, 11 Mar 2019 07:32:52 GMT

In an ISE deployment with all dedicated nodes, does Cisco recommend using redundant SXP servers? For example:

(2) Admin nodes (primary/secondary)

(2) MnT nodes (primary/secondary)

(2) PSN

(2) SXP

Thanks,

Steve

It depends how heavily loaded

Marvin Rhoads — Wed, 15 Mar 2017 12:07:42 GMT

It depends how heavily loaded your PSNs are and what platform you are using. (SXP is a service running on a PSN.) Of course if you aren't doing Trustsec (SGTs, SGACL etc.), then the question is moot.

There is a slide specific to SXP scaling in Craig Hyps' Cisco Live presentation "BRKSEC-3699 - Designing ISE for Scale and High Availability (2017 Melbourne)".

You can see it here (slide #145):

https://www.ciscolive.com/online/connect/sessionDetail.ww?SESSION_ID=94625&backBtn=true

Thanks Marvin, very useful

Steve Sewa — Wed, 15 Mar 2017 18:45:03 GMT

Thanks Marvin, very useful slide!