topic ISE Medium Deployment with >5 PSN? in Network Access Control

ISE Medium Deployment with >5 PSN?

mwenstro — Mon, 26 Jun 2017 23:39:22 GMT

My customer currently has 2 PAN in HA active/standby, 5 PSN each at different sites, 2500 base, 500 plus, 100 apex. Active endpoints is less than 1200. Customer wants to deploy 2 additional PSN at 2 different sites. Is there any technical (license, etc.) issue that would prevent having a total of 7 PSN without splitting out PAN into PAN + MNT? Various docs say that if => 5 PSN that makes it a "Large" deployment which warrants dedicated PAN and MNT nodes, which means they would need to buy 2 additional MNT nodes, for a total of 4. Customer does not want to do this. Please confirm. Note the Cisco Live preso slide. Thanks, Mike

Designing ISE for Scale & High Availability (2017 Berlin)

Re: ISE Medium Deployment with >5 PSN?

Jason Kunst — Tue, 27 Jun 2017 01:59:17 GMT

It's not a licensing issue, its technical support model

We only support these models and the other models are not tested and therefore not supported

Re: ISE Medium Deployment with >5 PSN?

mwenstro — Tue, 27 Jun 2017 18:00:12 GMT

Thanks for clarifying info. Customer would need to purchase 2 additional ISE nodes and deploy as separate PAN and MnT nodes, to get >5 PSN, making it a Large deployment model.

Re: ISE Medium Deployment with >5 PSN?

Jason Kunst — Tue, 27 Jun 2017 18:06:04 GMT

Correct

2 PAN

2 MNT

>5 PSNs

Re: ISE Medium Deployment with >5 PSN?

paul — Tue, 27 Jun 2017 22:13:17 GMT

Also note there is no reason you can't mix VMs and physicals. If the customer is running physical servers, they can just pick up two VM licenses (2500ish USD a piece) to expand their deployment. Granted they need to have the VM resources to host the VMs.