Configure 2 different wireless services using same ISE as PSN

[Security-enthusiast]

Hi All,

We have 2 ISEs in 2 different DCs which is configured in a cluster. I need to setup 2 wireless services for my client: corporate wireless and guest wireless. Just wanted to know if its possible to setup both services pointing towards the same PSN; and what are the issues/challenges I need to consider for the same. Any suggestions/help will be greatly appreciated. 

[balaji.bandi]

i do not see any issue, this is a common deployment, what is your concern?

[Security-enthusiast]

Hi Balaji,

In a previous project we had 2 different PSN ISEs for corporate and guest wireless each. The corporate setup was using internal CA for authentication and the guest setup external CA. The guest ISE was passing through firewall and getting natted to a public IP.  So I am a little unsure of how to proceed on this.

[balaji.bandi]

They are different SSID, they have different profiles right.

take an example, ISE deployment all in one box kind of setup. (here is there is no more 2 PSN ).

[Security-enthusiast]

Yes they had different SSIDs and different profiles with policy sets. So it will work right? There wont be any issue if we deploy both wireless services pointing towards same PSN?

[thomas]

No issues, just different Authorization Rules.