cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

164
Views
2
Helpful
1
Replies
Highlighted
Cisco Employee

ISE and Overlapping IP SPACE behavior

I understand ISE is not a multi tenant solution, and that we may be looking at a MOM to help manage multiple ISE instances.  I have a customer that is similar to a service provider, in that they have multiple business entities that may overlap from an IP space and are not fully connected between sites.  The question has come up as to if the remote sites always have connectivity to the Hub (Data Center) where ADM/MNT nodes will be - and we place PSN's locally to those remote sites, when ISE encounters duplicate IP mappings for sessions with different MAC addresses, how will that be handled by the system.  Obviously things like User to IP mapping will not work as expected because of duplicates, but from a pure radius authentication / authorization point of view will we incur any issues with sessions, assuming the sessions have Unique ID's and all endpoints have Unique MAC's.  Has anybody ever tried anything like this before?  Not saying we will do this, just curious on thoughts.

Thank You.

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Cisco Employee

Re: ISE and Overlapping IP SPACE behavior

Regular RADIUS and T+ should work. Some of the advanced use cases (e.g. profiling DNS probe) might not work.

View solution in original post

1 REPLY 1
Highlighted
Cisco Employee

Re: ISE and Overlapping IP SPACE behavior

Regular RADIUS and T+ should work. Some of the advanced use cases (e.g. profiling DNS probe) might not work.

View solution in original post