Solved: Cisco 2.3 ISE HA question

Heiko Kelling · ‎03-23-2018

Hi,

a very short question. Is the ISE reachable under one common IP address in a HA deployment or do I have to configure 2 IP addresses on each device inevitably?

Rob Ingram · ‎03-23-2018

Hi,
I assume you are referring to the PSN (the node authenticating the devices/users) then no, you would have to configure your switches to point to all PSN servers. You can use an external load balancer (eg F5) which means you then have 1 VIP address and multiple PSN's load balanced behind the load balancer.

HTH

View solution in original post

Rob Ingram · ‎03-23-2018

Hi,
I assume you are referring to the PSN (the node authenticating the devices/users) then no, you would have to configure your switches to point to all PSN servers. You can use an external load balancer (eg F5) which means you then have 1 VIP address and multiple PSN's load balanced behind the load balancer.

HTH

paul46 · ‎03-25-2018

I guess we can put primary and secondary PAN behind load balancer VIP too?