Cisco ISE Azure - 2nd NIC issues for Guest

[connor-jaques]

Hi,

We have a two node deployment of ISE 3.3 in Azure. We have added a second NIC to the virtual machine to be our Guest interface.

When loading our Guest SSID the splash page is no longer loading. Below is what I have done so far.

Subnet of the interface in Azure has route table assigned.

GigabitEthernet 1 has been configured in ISE CLI

Default gateway in CLI is gateway of Gig 0.

Any pointers on what is missing?

[Flavio Miranda]

Hi @connor-jaques 

 Who is managing your SSID?  How this device is configured?
If your ISE have a default gateway pointing to Gig0 and your Guest networks comes from Gig1, How the ISE is replying the traffic to the Guest users? It would expect you to add routes on the ISE for the Guest networks, otherwise the traffic will be sent to the Gig0 interface.

[ahollifield]

https://www.cisco.com/c/en/us/td/docs/security/ise/ISE_on_Cloud/b_ISEonCloud/m_ISEonAzureServices.html#concept_gd4_rzr_tsb

• Dual NIC is supported with only two NICs—Gigabit Ethernet 0 and Gigabit Ethernet 1. To configure a secondary NIC in your Cisco ISE instance, you must first create a network interface object in Azure, power off your Cisco ISE instance, and then attach this network interface object to Cisco ISE. After you install and launch Cisco ISE on Azure, use the Cisco ISE CLI to manually configure the IP address of the network interface object as the secondary NIC.