ISE 2.1 High availability

[vinodkrathi]

We have ISE 2.1 installed on SNS-3415-K9. Now we want to high availability configuration with VMware Virtual Machine so that ISE on hardware would be primary active and ISE on VM would be secondary standby. Can we achieve high availability ??

[Ravi Singh]

The Cisco Identity Services Engine (ISE) provides distributed deployment of runtime services with centralized configuration and management. Multiple nodes can be deployed together in a distributed fashion to support failover.  Please follow the below link to understand distributed deployment and its requirement.

http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_dis_deploy.html#wp1059169%0A

[nspasov · Accepted solution]

Hi there! Yes, using 1 x Virtual and 1 x Physical appliance in H/A is a supported configuration. This would be called a "Hybrid" deployment. There are a couple of things to keep in mind:

1. The maximum round trip delay between the two nodes has to be < 300ms

2. The virtual node should be configured to match the physical appliance (RAM, CPU, HDD, etc)

I hope this helps!

Thank you for rating helpful posts!

[vinodkrathi]

Thanks.