Cisco ISE Disaster Recovery

[CarlosGarcia84]

Hello Community,

I am wondering if anyone could offer some advice to architect a disaster recovery scenario.

We have 2 nodes (primary and secondary) that handle all the authorization and back each other up in case of failures.

We are wanting to replicate this on our Disaster Recovery Data Center. We have 2 other nodes available and would like to replicate and hopefully use them too.
Can I add the 2 other nodes to the deployment? Should I restore a backup and treat them as another servers?

Any thoughts will be appreciated.

Thank you

[balaji.bandi]

You can use depends on use case

If you add them distribution deployment and put them in Group DC1 as primary and DC2 as secondary - in case DC 1 fails DC2 PSN can do the work for you.

check some guidance Live presentation :

https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2020/pdf/DGTL-BRKSEC-3432-reference.pdf

[Marvin Rhoads]

Don't treat them as a separate deployment. Add them to the existing deployment and adjust the personas of each node to reflect the primary and DR data center roles. The presentation linked by @balaji.bandi has lots more details.