Additional NIC Interfaces

[joshhunter]

Hello, I was looking through the VM Install requirements for ISE 2.0 and I can see the NIC recommendation as follows:

"1 GB NIC interface required (two or more NICs are recommended)"

I also found similar guides that states ISE VM can be configured with 1-4 NICs and looking at the ISE Appliance hardware specifications they have 4x1Gbps NICs and the very latest Secure Network Server 3515 3595 Appliances have 6x1Gbps NICs.

I have not found any mention in any of the guides or case studies for usage of the additional NICs.

Please could someone enlighten me?

[Jason Kunst · Accepted solution]

Typically management port (for RADIUS or PSN > PAN communication) would run on ethernet 0. It could be on a small management network if you like.

You could then add in other interfaces for other purposes.  Guest portal interface in the DMZ on interface 1 for example.

Another interface for running SPAN port for profiler DHCP traffic is another example.

Cisco Identity Services Engine Administrator Guide, Release 2.0 - Guest Access User Interface Reference [Cisco Identit…

Allowed interfaces— Select the PSN interfaces which can run a portal. Only a PSN with an available allowed interface on a PSN can create a portal. You can configure any combination of physical and bonded interfaces. This is a PSN-wide configuration; all portals can only run on these interfaces, this interface configuration is pushed to all the PSNs.

• You must configure the Ethernet interfaces using IP addresses on different subnets.
• The interfaces you enable here must be available on all your PSNs, including VM-based ones when Policy Services turned on. This is required because any of these PSNs can be used for a redirect at the start of the guest session