How to split PAN and MnT

[abdulma]

Hello,

I've currently setup PAN and MnT on the same hardware. How can I move MnT to a new hardware 3495?

Is there any link that I can refer to?

[jan.nielsen]

Actually it's quite simple :

1.Install the same ISE version and patches as you are running now, on your new appliance

2.Configure ip/mask/gw/dns/ntptimezone (timezone and dns domain/servers should be the same)

3.Register the dns name of the new appliance in your dns

4.Login to the new appliance web interface, and install a certificate that you will use for services (guest, eap, ise services)

5.Go to the first ISE appliance and register the new node, once thats done, you can select it to only have the monitoring as it's only service.

Done

[abdulma]

Thanks, I'll try once the new box arrive. Any link that I can refer to?

[jan.nielsen]

It should be part of the regular installation guide, for the ISE version you are installing.

[Tim Steele]

You can start here: 

http://www.cisco.com/c/en/us/td/docs/security/ise/1-4/admin_guide/b_ise_admin_guide_14/b_ise_admin_guide_14_chapter_011.html#ID276

Tim