topic Re: CISCO ISE PRE REQUISITE in Network Access Control

CISCO ISE PRE REQUISITE

poornakumar — Wed, 26 Jun 2024 17:09:22 GMT

Hi team,

We are planning to create a new setup for ise.Actually we have a cisco ise for that particular location but that deployment is globally deployed. we plan to create a seperate setup for that particular location. So Please help we what are the pre requisites need to be collected before starting the deployment. And also suggest if there is any idea to setup a separate deployment for that particular location without starting from scratch. And share if any documentation available for pre requisite collection.

Re: CISCO ISE PRE REQUISITE

MHM Cisco World — Wed, 26 Jun 2024 17:13:28 GMT

Ypu can use NAD location feature

https://www.google.com/search?q=cisco.ISE+device+location&client=ms-android-samsung-gj-rev1&sca_esv=c1df660eec58a1d6&sca_upv=1&ei=oEt8ZvOPMs-qxc8PiYOKsAo&oq=cisco.ISE+device+location&gs_lp=EhNtb2JpbGUtZ3dzLXdpei1zZXJwIhljaXNjby5JU0UgZGV2aWNlIGxvY2F0aW9uMgYQABgWGB4yBhAAGBYYHjILEAAYgAQYhgMYigUyCxAAGIAEGIYDGIoFMgUQIRigATIFECEYoAFIn0NQmglYjEFwAHgAkAEAmAGjAqAB2iyqAQYwLjI2Lje4AQPIAQD4AQGYAhegAsEjwgICECnCAggQABiABBiiBMICBRAAGIAEwgIEEAAYHsICBhAAGA0YHsICBxAhGKABGAqYAwCIBgGSBwgwLjE2LjYuMaAH9YAB&sclient=mobile-gws-wiz-serp#fpstate=ive&vld=cid:585a0891,vid:E96DgXH6OFs,st:0

MHm

Re: CISCO ISE PRE REQUISITE

Rob Ingram — Wed, 26 Jun 2024 17:25:53 GMT

@poornakumar what is the latency between these global sites? You can have up to 300 ms maximum between the ISE PAN and other ISE nodes, which means you could deploy the PSN closer to the NAD (switches, routers etc) and still have one ISE cluster, which would be more manageable/cheaper then several different clusters.

The best reference is the Cisco Live presentation BRKSEC-2091, which covers the different ISE deployment options. https://www.ciscolive.com/c/dam/r/ciscolive/global-event/docs/2024/pdf/BRKSEC-2091.pdf