ISE & Load Balancers

[jmcgourt@cisco.com]

Hi, 

We have a question on the use of SNAT for load balancing - according to the documentation at the following link: https://community.cisco.com/t5/security-documents/ise-load-balancing/ta-p/3648759#toc-hId-1865742776, it appears that the load balancer always needs to go inline (without SNAT).

That article is from 2016 - is the information in that article still correct? Or is there any way we can implement a load balancer using SNAT, without it going inline?

[paul · Accepted solution]

The load balancer can't SNAT RADIUS calls from the network device to ISE.  As far as I know (and have implemented many times) this requirement hasn't changed.