cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
472
Views
1
Helpful
1
Replies

Cisco ISE for small branch with large delay

riferdiy
Level 1
Level 1

Dear Team,

My customer have many small branch (+/- 10 user) with large delay, the delay is +/- 800 ms.

What is the best practice for Cisco ISE 802.1x ?? Can we implement 802.1x in that branch with large delay ??

Best Regards,

1 Reply 1

Jason Kunst
Cisco Employee
Cisco Employee

The policy services node (radius server) cannot be more than 200-300ms from the administration and monitoring nodes due to database synchronization

With such high latency and such lower user count at remote office, then recommendation would be to centralize your deployment

Radius and Dot1x are much more susceptible to higher latency so the separation of the network access devices from the service node is acceptable

https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/install_guide/b_ise_InstallationGuide22/b_ise_InstallationGuide22_chapter_00.html