03-14-2017 09:19 PM - edited 03-11-2019 12:32 AM
In an ISE deployment with all dedicated nodes, does Cisco recommend using redundant SXP servers? For example:
(2) Admin nodes (primary/secondary)
(2) MnT nodes (primary/secondary)
(2) PSN
(2) SXP
Thanks,
Steve
Solved! Go to Solution.
03-15-2017 05:07 AM
It depends how heavily loaded your PSNs are and what platform you are using. (SXP is a service running on a PSN.) Of course if you aren't doing Trustsec (SGTs, SGACL etc.), then the question is moot.
There is a slide specific to SXP scaling in Craig Hyps' Cisco Live presentation "BRKSEC-3699 - Designing ISE for Scale and High Availability (2017 Melbourne)".
You can see it here (slide #145):
https://www.ciscolive.com/online/connect/sessionDetail.ww?SESSION_ID=94625&backBtn=true
03-15-2017 05:07 AM
It depends how heavily loaded your PSNs are and what platform you are using. (SXP is a service running on a PSN.) Of course if you aren't doing Trustsec (SGTs, SGACL etc.), then the question is moot.
There is a slide specific to SXP scaling in Craig Hyps' Cisco Live presentation "BRKSEC-3699 - Designing ISE for Scale and High Availability (2017 Melbourne)".
You can see it here (slide #145):
https://www.ciscolive.com/online/connect/sessionDetail.ww?SESSION_ID=94625&backBtn=true
03-15-2017 11:45 AM
Thanks Marvin, very useful slide!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide