Additional NIC Interfaces

joshhunter — Mon, 25 Apr 2016 21:14:15 GMT

Hello, I was looking through the VM Install requirements for ISE 2.0 and I can see the NIC recommendation as follows:

"1 GB NIC interface required (two or more NICs are recommended)"

I also found similar guides that states ISE VM can be configured with 1-4 NICs and looking at the ISE Appliance hardware specifications they have 4x1Gbps NICs and the very latest Secure Network Server 3515 3595 Appliances have 6x1Gbps NICs.

I have not found any mention in any of the guides or case studies for usage of the additional NICs.

Please could someone enlighten me?

Re: Additional NIC Interfaces

Jason Kunst — Tue, 26 Apr 2016 00:22:18 GMT

Typically management port (for RADIUS or PSN > PAN communication) would run on ethernet 0. It could be on a small management network if you like.

You could then add in other interfaces for other purposes. Guest portal interface in the DMZ on interface 1 for example.

Another interface for running SPAN port for profiler DHCP traffic is another example.

Cisco Identity Services Engine Administrator Guide, Release 2.0 - Guest Access User Interface Reference [Cisco Identit…

Allowed interfaces— Select the PSN interfaces which can run a portal. Only a PSN with an available allowed interface on a PSN can create a portal. You can configure any combination of physical and bonded interfaces. This is a PSN-wide configuration; all portals can only run on these interfaces, this interface configuration is pushed to all the PSNs.

You must configure the Ethernet interfaces using IP addresses on different subnets.
The interfaces you enable here must be available on all your PSNs, including VM-based ones when Policy Services turned on. This is required because any of these PSNs can be used for a redirect at the start of the guest session

topic Re: Additional NIC Interfaces in Network Access Control

Additional NIC Interfaces

Re: Additional NIC Interfaces