cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1360
Views
1
Helpful
4
Replies

ISE Medium Deployment with >5 PSN?

mwenstro
Cisco Employee
Cisco Employee

My customer currently has 2 PAN in HA active/standby, 5 PSN each at different sites, 2500 base, 500 plus, 100 apex. Active endpoints is less than 1200.  Customer wants to deploy 2 additional PSN at 2 different sites. Is there any technical (license, etc.) issue that would prevent having a total of 7 PSN without splitting out PAN into PAN + MNT?  Various docs say that if => 5 PSN that makes it a "Large" deployment which warrants dedicated PAN and MNT nodes, which means they would need to buy 2 additional MNT nodes, for a total of 4. Customer does not want to do this. Please confirm. Note the Cisco Live preso slide. Thanks, Mike

Designing ISE for Scale & High Availability (2017 Berlin)

capture_003_26062017_182438.jpg

1 Accepted Solution

Accepted Solutions

Jason Kunst
Cisco Employee
Cisco Employee

It's not a licensing issue, its technical support model

We only support these models and the other models are not tested and therefore not supported

View solution in original post

4 Replies 4

Jason Kunst
Cisco Employee
Cisco Employee

It's not a licensing issue, its technical support model

We only support these models and the other models are not tested and therefore not supported

Thanks for clarifying info. Customer would need to purchase 2 additional ISE nodes and deploy as separate PAN and MnT nodes, to get >5 PSN, making it a Large deployment model.

Correct

2 PAN

2 MNT

>5 PSNs

Also note there is no reason you can't mix VMs and physicals.  If the customer is running physical servers, they can just pick up two VM licenses (2500ish USD a piece) to expand their deployment.  Granted they need to have the VM resources to host the VMs.