ISE and DNAC Integration on large deployment

[vivarock12]

whats the best practice for the integration when the ise deployment is a large one?

on the guide they talked about a 2 node deployment:

https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/cisco-dnac-ise-deploy-guide.html

but what about when the deploment is a large one?

should the integration from the DNAC point to he IP address of a dedicated PXGRID NODE, i know thats clear but the questions come from the following.

Does the ERS READ/WRITE permissions are for the PAN? or for any PXGRID NODE?

because in that case if at the moment of the integration i set the IP ADDRESS of a dedicated PXGRID NODE(thats not running the PAN persona) DNAC wont be able to apply changes to the SGTs?

can someone confirm if misinterpreting the guide or the concept, or if neccesary to enable the PXGRID PERSONA on the PAN for this specific case?

Saludos,

Gerardo Mejia

[Arne Bier]

When integrating DNAC with ISE, you always tell DNAC the IP address of the Primary Admin Node. DNAC connects to that IP and interrogates the details of your entire deployment. If the pxGrid persona is part of the Admin nodes, then it will talk to those nodes, and if the pxGrid nodes are separate nodes, then DNAC will talk to those. 

Once the integration has been established, any changes to the ISE Deployment (e.g. adding PSNs) will be dynamically updated in DNAC>