Guest accouns in ISE distributed deployment

[milos_p]

Hi guys,

I will deploy ISE in distributed deployment, meaning:

2x PAN/Mnt

4x PSN nodes

I know sponsor portal is hosted on the PSN nodes.

My question is, if there is any synchronization of the guest accounts between PSN nodes that are created via sponsor portal?

Are the accounts created via sponsor portal on PSN node 1 available to be used on other PSN nodes?

Thanks a lot!

Milos

[balaji.bandi]

yes distributed deployment automatically sync the information.

here is some informaiton help you :

https://community.cisco.com/t5/security-documents/ise-guest-access-prescriptive-deployment-guide/tac-p/3687738#M5894

[milos_p]

Hi,

So you want to say I can make guest accounts on any PSN node (via sponsor portal on that PSN node), and they will be available to use on all the PSN nodes?

Thanks,

Milos

[poongarg · Accepted solution]

The PSN do a RPC call to PAN and tell to add account to its configuration database, and then via normal replication at TCP port 12001 the information is sent to other PSN's. So yes, the account can be used on all other PSN nodes.

[milos_p]

This explains the logic, thank you very much!

Just one more thing. Apart from being able to use guest accounts on all PSN nodes, are they also visible in the sponsor portals of the other PSN nodes as well, or only in the one that accounts were created originally?

[poongarg]

Guest account created on one PSN sponsor portal should be visible on sponsor portal of other PSN as well.