topic Re: Node group and use cases in Network Access Control

Node group and use cases

dgaikwad — Mon, 28 Sep 2020 08:26:13 GMT

Hi Experts,
I see that the nodes can be grouped together to form a node groups, but I am really not sure as off what real world use cases will need to use node groups?
The documentation does not offer much of a explanation of its usage apart from that nodes can form a node groups.
Could you share some real world use cases as off why would a company need to setup node groups?
Or if there have been cases where node group was a mandated from the beginning?

Re: Node group and use cases

Mark Elsen — Mon, 28 Sep 2020 10:23:23 GMT

- Check this thread :

https://community.cisco.com/t5/network-access-control/ise-node-groups/td-p/3514849

Re: Node group and use cases

dgaikwad — Wed, 30 Sep 2020 09:27:58 GMT

This thread has the same para from the documentation that I had been referencing to and apart from that are there any other use cases that compel or are atleast recommended for configuring the node groups?

Re: Node group and use cases

Mike.Cifelli — Wed, 30 Sep 2020 12:46:47 GMT

Adding an additional thread relating to node groups that bit me with an outage: https://community.cisco.com/t5/network-access-control/psn-node-failure-resulting-in-immediate-vpn-termination/td-p/4141048

HTH!

Re: Node group and use cases

Greg Gibbs — Wed, 30 Sep 2020 23:13:56 GMT

Node Groups are mainly used to reduce Profiling and data replication due to ownership changes for large distributed clusters. See the Cisco Live presentation on Designing ISE for Scale & High Availability - BRKSEC-3699 for more info.