topic Re: ISE Design/Architecture Guide in Network Access Control

ISE Design/Architecture Guide

gsicari — Tue, 06 Dec 2016 13:39:54 GMT

I have been poking around internally to see if we have a design guide for ISE that covers different design options, different size deployments, best practices, etc. To my surprise I haven’t been able to find one. Could someone please point me in the right direction?

Re: ISE Design/Architecture Guide

howon — Tue, 06 Dec 2016 15:39:13 GMT

Have you looked at the following:

Cisco Identity Services Engine Installation Guide, Release 2.1 - Network Deployments in Cisco ISE [Cisco Identity Servi…

Re: ISE Design/Architecture Guide

HumanTorch — Tue, 22 May 2018 00:03:42 GMT

here's the updated version:

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/install_guide/b_ise_InstallationGuide24/b_ise_InstallationGuide24…

Re: ISE Design/Architecture Guide

Damien Miller — Tue, 22 May 2018 00:23:53 GMT

I find the design / install guide is not very clear. When you get to the distributed deployment section it just lists 500k active sessions without indicating a per node figure. I have been given mixed information being 20k per node or 40k per node. Are the active sessions per node figures outlined anywhere when using dedicated PAN and MNT nodes?

Deployment Model	Platform	Max # Dedicated PSNs	Max RADIUS Sessions Per Deployment	Max Passive Identity Sessions Per Deployment	Max Merged & Easy Connect Sessions* (Shared PSNs)	Max Merged & Easy Connect Sessions* (Dedicated PSNs)
Standalone	3515	0	7500	100,000	1,000	N/A
Standalone	3595	0	20,000	300,000	2,000	N/A
PAN and MnT on same node-Dedicated PSNs	3515 as PAN and MnT	5	7,500	100,000	1,000	5,000
PAN and MnT on same node-Dedicated PSNs	3595 as PAN and MnT	5	20,000	300,000	2,000	10,000
Dedicated (PAN, MnT, PXG, and PSN Nodes)	3595 as PAN and MnT	50	500,000	300,000	N/A	50,000
Dedicated (PAN, MnT, PXG, and PSN Nodes)	Virtual Large SNS-3595 as PAN and MnT	50	500,000	300,000	N/A	50,00