can i assign different subnet IP addresses to each cisco ISE in distributed deployment?

[sandani.shaik@rci.rogers.com]

Hi,

Do i need to have ip addresses from same subnet to have cisco ISE in distributed deployment or i can assign different subnet IP addresses and make them work.

[gbekmezi-DD · Accepted solution]

Yes, the nodes can have different IP addresses.

[Jason Kunst]

ISE nodes can be on different networks and should likely be on different networks in distributed because you would want psns at different sites

[sandani.shaik@rci.rogers.com]

i have only one site and i have 3 devices in active/Standby and PSN.

The PSN node is monitoring the health of the 2 ISE devices (primary and secondary)

in this case, can i have my health node in different subnet and monitor the active/standby pair another subnet ?

[Jason Kunst]

Yes

[sandani.shaik@rci.rogers.com]

If that works, then i have to have routing in place to send the probes to other subnet via default gateway? will there be any issues with auto failover ?

[Jason Kunst]

There is nothing special about the network needed between the ise nodes

Yes you would need routing between the boxes if they are l3 separated

If this is too much keep them on same network

[sandani.shaik@rci.rogers.com]

Thanks for the explanation Jason...