cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

91
Views
0
Helpful
1
Replies

Question About Cisco ISE Clustering

Hello dear community,

 

We have a question about Cisco ISE Clustering. Currently, we have two Cisco ISEs with 2.1 Patch 6 version installed on same CPD.

 

Regarding an infraestructure change, we will have to install Cisco ISE on other CPD on other location. We would like to know if this is possible and also, want to know what could be the recomendations for this environment.

 

Regards,

Aitor

Everyone's tags (2)
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: Question About Cisco ISE Clustering

Not sure what a CPD is or what your topology looks like but likely you have 2 standalone systems running PAN/PSN/MNT on each of them. Depends on why you're moving. You can build another setup in parallel and add it as a secondary in the deployment (after shutting down current secondary system).

I would recommend looking at Cisco Live BRKSEC-3432 under performance and scale learning link
https://community.cisco.com/t5/security-documents/ise-performance-amp-scale/ta-p/3642148

 

You should also look to moving to a supported long term release. 2.2 or even 2.4

https://community.cisco.com/t5/security-blogs/announcing-the-quot-suggested-release-quot-status-of-ise-2-4/ba-p/3775587

View solution in original post

1 REPLY 1
Cisco Employee

Re: Question About Cisco ISE Clustering

Not sure what a CPD is or what your topology looks like but likely you have 2 standalone systems running PAN/PSN/MNT on each of them. Depends on why you're moving. You can build another setup in parallel and add it as a secondary in the deployment (after shutting down current secondary system).

I would recommend looking at Cisco Live BRKSEC-3432 under performance and scale learning link
https://community.cisco.com/t5/security-documents/ise-performance-amp-scale/ta-p/3642148

 

You should also look to moving to a supported long term release. 2.2 or even 2.4

https://community.cisco.com/t5/security-blogs/announcing-the-quot-suggested-release-quot-status-of-ise-2-4/ba-p/3775587

View solution in original post