Only one PAN/MnT in Hybrid-Distributed Deployment

[kkvitovs]

Hello everyone,

Just would like to get a confirmation that in Hybrid-Distributed Deployment (Medium-Sized Network Deployment/ with PAN + MnT on the same appliance and up to 5 x PSNs), we can have only ONE PAN/MnT. Because everywhere (BRKSEC-3432, admin guide https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/install_guide/b_ise_InstallationGuide26/b_ise_InstallationGuide_26_chapter_00.html#ID-1413-000000b1) we always mention 2 x PAN + MnT. So could you clarify is the 2nd PAN/MnT mandatory? or it's possible to use only one?
P.S. I understand the advantages of having 2 x PAN/MnT nodes for redundancy, but the question is different.

[Damien Miller · Accepted solution]

Two PAN/MnT nodes are not mandatory in any ISE deployment, just highly recommended for the redundancy. There is no technical reason you can't run just one of each role.