topic Do you mean PSN node group in Network Access Control

ISE distributed deployment and Licensing

routexpert — Mon, 11 Mar 2019 06:53:29 GMT

Hi,

I have 2 x ISE-VM-K9= licenses and i want to deploy ISE in an Standalone mode with HA.

i.e have 2 boxes Node1 and Node2 each hosting all three personas and closely located in 1 data centre.

then i want to have a third box node 3 in a remote data centre (only for DR purpose).

Whats the best way to design this.

1. Have node 1 and node 3 in a host group and use as primary aaa then node 2 as secondary

2. Have Node1 and 2 in a local host group, then host 3 as another entity

I'm worried about the licensing requirement of the 2nd option

Any thoughts ?

regards

Sergeant

Marvin Rhoads — Fri, 24 Jun 2016 14:42:47 GMT

Do you mean PSN node group when you say 'host group'?

Licensing-wise, all nodes in a deployment share the ISE licenses installed on the PAN.

routexpert — Fri, 24 Jun 2016 14:56:06 GMT

Yes PSN node group

Thats great Marvin..

that answers my concern