DNA Center/ISE integration

J19 — Mon, 24 Oct 2022 06:51:00 GMT

Hi All,

Do we need the ISE and the DNA center to be implemented on the same site? or we just need to grant connectivity between them?

is there any other requirements for this integration?

Many Thanks,

Re: DNA Center/ISE integration

willwetherman — Mon, 24 Oct 2022 20:31:52 GMT

Hi @J19

No, DNA Center and ISE do not need to be located on the same site (or on the same subnet for that matter). DNA Center just needs to be able to communicate with ISE on ports TCP 443, 5222, 891 and 9060. See the following link for the requirements, considerations and instructions to integrate DNA Center with ISE.

https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/2-3-3/install_guide/2ndgen/b_cisco_dna_center_install_guide_2_3_3_2ndGen/m_complete_first_time_setup_2_3_3_2ndgen.html#task_ikj_pg3_sfb

Note that the recommended RTT between DNA Center and ISE is < 200ms, however up to 300ms is supported. See the SD-Access Requirements (Figure 3) in the latest DNA Center datasheet.

https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/dna-center/nb-06-dna-center-data-sheet-cte-en.html

Hope that this helps.

Will

topic DNA Center/ISE integration in Software-Defined Access (SD-Access)

DNA Center/ISE integration

Re: DNA Center/ISE integration