cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
661
Views
0
Helpful
8
Replies

ISE Medium and Large Licensing

manasjai
Cisco Employee
Cisco Employee

Hi,

 

I have 2 Large VMs and 4 Medium VMs on which I got a couple of concerns:

 

1) can I use the 2 Large VMs with 256GB memory as PAN + MnT with PxGrid? 

I see the 256GB VM can be used for MnT only but can I use it in Hybrid Mode? https://community.cisco.com/t5/policy-and-access/differences-for-the-different-ise-vm-license-bundles/td-p/3377503

2) If 1 is possible, How many active endpoints can I have? I see 1,500,000 as per the sheet below

https://community.cisco.com/t5/security-documents/ise-performance-amp-scale/ta-p/3642148

 

Thanks,

Manasi Jain

1 Accepted Solution

Accepted Solutions

Thanks Jason,

So here is what I understand - if I run Large VM with 256GB, I should be able to use it as PAN+MnT+PxGrid without any issues. Even if I run 2.4p6 in SDA fabric. Further, it will support upto 50k endpoints subject to type of things enabled like BYOD, guest etc.

Thanks,
Manasi

View solution in original post

8 Replies 8

Aravind Ravichandran
Participant
Participant

Hi Manasi,

1. Yes, you can use Large VM as PAN + MNT+ pxGrid.256GB ram configuration is similar to SNS 3695

2. Even though, Large VMs used as PAN & MNT personas is enabled on a single node it is considered as a medium deployment. As per the scaling guide, you can go up to 5 PSNs max with 50k max concurrent session.

As an alternative option, you can get the same 50k concurrent session with 2 Large standalone ISE(v2.6) VMs. 

-Aravind

Thanks Aravind
Actually what confuses me is the link below:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/install_guide/b_ise_InstallationGuide24/b_ise_InstallationGuide24_chapter_01.html
which says - "The large node is only for use as a performance-enhanced MnT node. You cannot use the Large VM as a PAN, PSN, or pxGrid node."

As per your comment, I can have the Large VM with 256GB memory as PAN+ MnT + PxGrid. This holds true even if I am on 2.4p6 and in an SDA fabric correct?

-
Manasi Jain

The large MNT was to support better reporting performance only in large deployment. When you combine multiple services on 1 box you’re a small medium distributed deployment with support up to 50k endpoints in 2.6. It doesn’t make sense to utilize that amount of memory unless you’re talking about lots of clients and transactions

Thanks Jason,

So here is what I understand - if I run Large VM with 256GB, I should be able to use it as PAN+MnT+PxGrid without any issues. Even if I run 2.4p6 in SDA fabric. Further, it will support upto 50k endpoints subject to type of things enabled like BYOD, guest etc.

Thanks,
Manasi