topic Re: ISE node group add/delete PSN impact in Network Access Control

ISE node group add/delete PSN impact

csavas — Wed, 10 Oct 2018 13:32:54 GMT

Hi,

my customer has a large ISE deployment with 6x PSN behind LB, two further PSN locations with each two PSNs.

Customer has no node group configured yet. I want to understand the impact creating a node group and adding PSN to the group. The customer already deployed a part of their endpoints but not finished the deployment. My question/concern is if this would affect the deployed endpoints in the network oder restarts even the PSNs.

Thanks in advance.

Cengiz

Re: ISE node group add/delete PSN impact

Aravind Ravichandran — Wed, 10 Oct 2018 13:50:32 GMT

Hi,

Please refer this guide https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_dis_deploy.html#wp1134272

Deleting a node group does not delete any of the nodes that belong to it. The nodes are simply dissociated from the group.

Re: ISE node group add/delete PSN impact

csavas — Wed, 10 Oct 2018 15:09:57 GMT

Thanks for the link.
But what about creating a node group and adding nodes? Any impact?

Re: ISE node group add/delete PSN impact

Aravind Ravichandran — Wed, 10 Oct 2018 17:44:15 GMT

There won’t be any impact,It optimizes the replication of endpoint profiling data by retaining less significant attributes local to the group and reducing the information that is replicated to the remote nodes in the network. Node group members also check on the availability of peer group members. If the group detects that a member has failed, it attempts to reset and recover all URL-redirected sessions on the failed node.

Please make sure both are connected on same network before adding into node group.