cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1312
Views
25
Helpful
2
Replies

configuring the ISE cluster/NAC solution.

network_geek1979
Beginner
Beginner

Folks,

We are to start working on initial cluster configuration for our Cisco ISE VM's.

 

The design is like, we have 2 nodes for MnT/PAN and 5 nodes which will be the PSN nodes. As of now we have all of those up on standalone with IP assigned.

 

I am looking for some documents which will help me finish the cluster configuration. Any detailed links I can get?

 

Do these VM's need to be licensed before starting with the cluster configuration?

 

Regards!

N.

2 Replies 2

Rob Ingram
VIP Expert VIP Expert
VIP Expert

@network_geek1979 

Register the first node as primary, you then register the remaining nodes to the Primary and assign their roles.

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ISE_admin_guide_24/m_setup_cisco_ise.html

 

Before you can register the nodes to the primary you either need to create a new Admin node certificate signed by your Internal CA or export the certificate and import to the Primary - the nodes will fail to register if the certificate is not trusted.

 

You do not need to license the nodes before registering with the cluster, you get a 90 day eval license. Once the cluster is formed you can then add the licenses.

 

Lab minutes have some good videos, although dated, the basics are the same.

http://www.labminutes.com/video/sec/ISE

 

 

 

 

Mike.Cifelli
Advisor
Advisor

Adding additional resources that are great: Cisco ISE & NAC Resources - Cisco Community

HTH and good luck!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers