topic Re: configuring the ISE cluster/NAC solution. in Network Access Control

configuring the ISE cluster/NAC solution.

network_geek1979 — Wed, 15 Sep 2021 11:40:54 GMT

Folks,

We are to start working on initial cluster configuration for our Cisco ISE VM's.

The design is like, we have 2 nodes for MnT/PAN and 5 nodes which will be the PSN nodes. As of now we have all of those up on standalone with IP assigned.

I am looking for some documents which will help me finish the cluster configuration. Any detailed links I can get?

Do these VM's need to be licensed before starting with the cluster configuration?

Regards!

Re: configuring the ISE cluster/NAC solution.

Rob Ingram — Wed, 15 Sep 2021 11:57:28 GMT

@network_geek1979

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ISE_admin_guide_24/m_setup_cisco_ise.html

Before you can register the nodes to the primary you either need to create a new Admin node certificate signed by your Internal CA or export the certificate and import to the Primary - the nodes will fail to register if the certificate is not trusted.

You do not need to license the nodes before registering with the cluster, you get a 90 day eval license. Once the cluster is formed you can then add the licenses.

Lab minutes have some good videos, although dated, the basics are the same.

http://www.labminutes.com/video/sec/ISE

Re: configuring the ISE cluster/NAC solution.

Mike.Cifelli — Wed, 15 Sep 2021 12:46:43 GMT

Adding additional resources that are great: Cisco ISE & NAC Resources - Cisco Community

HTH and good luck!