ISE Configuration in Distributed Environment

[sachpednekar]

                  Hi All,

I have quick questions about  ISE deployment in Distributed environment, as i have purchased 2 X Cisco ise 3395 - For Data Center and 3 X Cisco ISE 3355 for remote location with 3500 Base licences and 500 Advance licences.

i have some questions on this deployment

i will install 1 3395 in Primary Datacenter and other 3395 in Our secondary Data center as Primary admin+Primary Monitoring and Secondary Admin+Secondary Monitoring

and each 3355 will get installed in Remote location as policy server, My Question is it this will be correct deployment?

or while configuring 3395 do i need to configure Policy server as well in addition to Primary admin and monitoring?

or please suggest me best deployment stratagy!

Thanks,

Sachin

[Tarik Admani]

Sachin,

How are all the sites connected (via MPLS) based on the equipment the customer must have a good WAN setup.

In most scenarios I usually position the the PSN at the central location anyways but it all depends on how the customer's network is configured.

thanks,

Tarik Admani
*Please rate helpful posts*

[sachpednekar]

Thanks for the reply,

all three sites are connected in MPLS with 100MB redundant band width

we are have 2 data center one is primary and other is secondary. and all client locations are connected with 100 Meg links where i am planning to install 3355 which will act as authentication server.

but now my question is

3395 - Primary Admin+Primary Monitoring - Primary DC

3395 - Secondary Admin+ Secondary Monitoring - Secondary DC

3355- will say for one remote location(PSN)

3355- Second remote Location(PSN)

3355- third Remote location (PSN)

thanks,

Sachin

[Tarik Admani]

Sachin,

i would suggest the following change:

3395 - Primary Admin+Secondary Monitoring - Primary DC

3395 - Secondary Admin+ Primary Monitoring - Secondary DC

Tarik Admani
*Please rate helpful posts*

[sachpednekar]

Thanks I will do.

Can I get any installation document which is prepared at the time of real time implementation ? Like authentication and authorization policy config!

Step by step guide!

Sent from Cisco Technical Support iPhone App

[vikasyad]

Yes, your deployment is quite achievable &  looks fine. Please  review the below links which will assist you in  deployment:

http://www.cisco.com/en/US/solutions/collateral/ns340/ns414/ns742/ns744/docs/howto_50_ise_deployment_tg.pdf

http://www.cisco.com/en/US/docs/security/ise/1.0/install_guide/ise10_deploy.pdf

http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_dis_deploy.html

[harvisin]

Hello Sachin,

The below mentioned links will hep you out:-

http://www.cisco.com/en/US/docs/security/ise/1.1.1/installation_guide/ise_deploy.html#wp1151366

http://www.cisco.com/en/US/solutions/ns340/ns414/ns742/ns744/landing_DesignZone_TrustSec.html

These two links will give you a fair idea !!