topic Re: Using secondary PAN as PSN in Network Access Control

Using secondary PAN as PSN

dgaikwad — Tue, 14 Sep 2021 07:24:26 GMT

Hi Team,

Scenario:
Load balance radius traffic between 2 PSNs.
Setup:
It is a 2 node setup with primary and secondary PANs. These are located at two different locations, that one at DC and other at DR. Both have PSN services running on them.
Issue:
Now the question is that, would the PSN services be active all the time in this configuration or will they come online only when primary PAN fails and secondary PAN is made as the primary?

Re: Using secondary PAN as PSN

Karsten Iwen — Tue, 14 Sep 2021 07:26:25 GMT

The PSN services are active the moment they are activated in your deployment. You directly can start using both in your NAD-config.

Re: Using secondary PAN as PSN

Marcelo Morais — Tue, 14 Sep 2021 10:50:03 GMT

Hi @dgaikwad ,

beyond what @Karsten Iwen said ...

Remember that each ISE Deployment must have: at least one PAN, at least one MnT (Primary and Secondary: PAN and MnT work as Active and Standby state) and one or more PSNs (all Active state).

Note: PSN will work even if PAN (Primary and/or Secondary) is down.

Hope this helps !!!