topic Re: Sd- Access Design help in Software-Defined Access (SD-Access)

Sd- Access Design help

M_alamin — Wed, 23 Apr 2025 07:15:17 GMT

Hi,

we had situation where two nodes PAN,MNT must be installed on the cloud and two nodes PSN must be installed on prem, catalyst center (DNAC) installed on prem as well and we want to make integration with DNAC and ISE, question where we should enable pxgrid should we enable it on the cloud along with PAN, MNT only or along with PSN on prem only or enable it on all the nodes?

thanks

Re: Sd- Access Design help

AshSe — Tue, 13 May 2025 09:36:19 GMT

Hello @M_alamin

It is recommended to enable pxGrid on ALL ISE nodes: PAN, MNT, and PSNs, regardless of location (cloud or on-prem). Enabling pxGrid on all ISE nodes ensures comprehensive visibility, centralized policy enforcement, high availability, and simplified management in your hybrid ISE and DNAC deployment.

HTH & Stay Curious!

AshSe

Community Etiquette:

Insert photos/images inline - don't attach.

Always mark helpful and correct answers, it helps others find what they need.

For a prompt reply, kindly tag @name. An email will be automatically sent to the member.

Re: Sd- Access Design help

Torbjørn — Tue, 13 May 2025 10:29:44 GMT

You should follow the deployment types outlined in the performance and scalability guide: https://www.cisco.com/c/en/us/td/docs/security/ise/performance_and_scalability/b_ise_perf_and_scale.html#Cisco_Concept.dita_67b428f0-2240-4383-bd49-5eb7a7b98a35

In this case you are running a medium deployment and should enable PXgrid on your PAN nodes.

EDIT:
Remember that the integration between Cat-C and ISE is only for administrative purposes. It doesn't directly affect the dataplane so it won't be an issue for users if the connectivity between Cat-C and your PAN nodes drop.