topic Re: HA for TACACS+ in ISE with different hardware in Network Access Control https://community.cisco.com/t5/network-access-control/ha-for-tacacs-in-ise-with-different-hardware/m-p/3568089#M536021 <HTML><HEAD></HEAD><BODY><P>Yes, but the overall scale will be based on the smaller h/w, 3495. For the performance sake, I recommend using 3595 as primary.</P></BODY></HTML> Thu, 23 Feb 2017 09:10:13 GMT howon 2017-02-23T09:10:13Z HA for TACACS+ in ISE with different hardware https://community.cisco.com/t5/network-access-control/ha-for-tacacs-in-ise-with-different-hardware/m-p/3568088#M536019 <HTML><HEAD></HEAD><BODY><P>My customer have existing Cisco ACS in SNS3495, they want to purchased HA for this.</P><P></P><P>With EoS notification from Cisco ACS, I plan to proposed Cisco ISE in 3595 for them.</P><P></P><P>The question are :</P><P>1. Can we achieve HA, policy &amp; configuration replication with existing hardware ??</P><P>2. If the existing appliance (ACS SNS3495) must migrate to Cisco ISE, can we achieve HA, policy &amp; configuration replication with different hardware ( ISE with Tacacs in SNS3495 &amp; ISE with Tacacs in SNS3595) ??</P></BODY></HTML> Thu, 23 Feb 2017 03:49:51 GMT https://community.cisco.com/t5/network-access-control/ha-for-tacacs-in-ise-with-different-hardware/m-p/3568088#M536019 riferdiy 2017-02-23T03:49:51Z Re: HA for TACACS+ in ISE with different hardware https://community.cisco.com/t5/network-access-control/ha-for-tacacs-in-ise-with-different-hardware/m-p/3568089#M536021 <HTML><HEAD></HEAD><BODY><P>Yes, but the overall scale will be based on the smaller h/w, 3495. For the performance sake, I recommend using 3595 as primary.</P></BODY></HTML> Thu, 23 Feb 2017 09:10:13 GMT https://community.cisco.com/t5/network-access-control/ha-for-tacacs-in-ise-with-different-hardware/m-p/3568089#M536021 howon 2017-02-23T09:10:13Z Re: HA for TACACS+ in ISE with different hardware https://community.cisco.com/t5/network-access-control/ha-for-tacacs-in-ise-with-different-hardware/m-p/3568090#M536023 <HTML><HEAD></HEAD><BODY><P>Hi howon,</P><P></P><P>What do u mean as "primary"? Is it primary tacacs server configuration when we configure in switch ??</P><P></P><P>How about ISE system configuration ?? Can we use admin,PSN, monitoring persona in both hardware ??</P></BODY></HTML> Fri, 24 Feb 2017 05:02:29 GMT https://community.cisco.com/t5/network-access-control/ha-for-tacacs-in-ise-with-different-hardware/m-p/3568090#M536023 riferdiy 2017-02-24T05:02:29Z Re: HA for TACACS+ in ISE with different hardware https://community.cisco.com/t5/network-access-control/ha-for-tacacs-in-ise-with-different-hardware/m-p/3568091#M536024 <HTML><HEAD></HEAD><BODY><P>I meant primary for Admin &amp; MnT persona. So you would want the 3595 to be primary admin &amp; MnT.</P><P></P><P>There is no primary concept for PSN, but whatever you configure first on the switch as T+ server would be used more.</P></BODY></HTML> Fri, 24 Feb 2017 15:46:35 GMT https://community.cisco.com/t5/network-access-control/ha-for-tacacs-in-ise-with-different-hardware/m-p/3568091#M536024 howon 2017-02-24T15:46:35Z