topic You can start here: http:/ in Network Access Control

How to split PAN and MnT

abdulma — Mon, 11 Mar 2019 06:00:40 GMT

Hello,

I've currently setup PAN and MnT on the same hardware. How can I move MnT to a new hardware 3495?

Is there any link that I can refer to?

jan.nielsen — Sun, 30 Aug 2015 21:26:54 GMT

Actually it's quite simple :

1.Install the same ISE version and patches as you are running now, on your new appliance

2.Configure ip/mask/gw/dns/ntptimezone (timezone and dns domain/servers should be the same)

3.Register the dns name of the new appliance in your dns

4.Login to the new appliance web interface, and install a certificate that you will use for services (guest, eap, ise services)

5.Go to the first ISE appliance and register the new node, once thats done, you can select it to only have the monitoring as it's only service.

Done

abdulma — Mon, 31 Aug 2015 07:07:24 GMT

Thanks, I'll try once the new box arrive. Any link that I can refer to?

jan.nielsen — Mon, 31 Aug 2015 13:05:27 GMT

It should be part of the regular installation guide, for the ISE version you are installing.

Tim Steele — Mon, 31 Aug 2015 14:28:39 GMT

You can start here:

http://www.cisco.com/c/en/us/td/docs/security/ise/1-4/admin_guide/b_ise_admin_guide_14/b_ise_admin_guide_14_chapter_011.html#ID276

Tim