configuring the ISE cluster/NAC solution.

[network_geek1979]

Folks,

We are to start working on initial cluster configuration for our Cisco ISE VM's.

The design is like, we have 2 nodes for MnT/PAN and 5 nodes which will be the PSN nodes. As of now we have all of those up on standalone with IP assigned.

I am looking for some documents which will help me finish the cluster configuration. Any detailed links I can get?

Do these VM's need to be licensed before starting with the cluster configuration?

Regards!

N.

[Rob Ingram]

@network_geek1979 

Register the first node as primary, you then register the remaining nodes to the Primary and assign their roles.

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ISE_admin_guide_24/m_setup_cisco_ise.html

Before you can register the nodes to the primary you either need to create a new Admin node certificate signed by your Internal CA or export the certificate and import to the Primary - the nodes will fail to register if the certificate is not trusted.

You do not need to license the nodes before registering with the cluster, you get a 90 day eval license. Once the cluster is formed you can then add the licenses.

Lab minutes have some good videos, although dated, the basics are the same.

http://www.labminutes.com/video/sec/ISE

[Mike.Cifelli]

Adding additional resources that are great: Cisco ISE & NAC Resources - Cisco Community

HTH and good luck!