ISE - Pointing traffic to local PSN

[Mojo98]

With ISE setup in a distributed deployment, there are PSNs deployed locally to specific locations. In order to point traffic from a particular location to its local PSN, it's my understanding that this can be accomplished by configuring the local NAD to have the local PSN be the first RADIUS server in the RADIUS group configuration, and then have the backups listed after.

Is configuring the NAD the only step required for having traffic from a particular location point to its local PSN, or is additional configuration required on the PAN?

Any guidance would be greatly appreciated.

[Muhammad Awais Khan · Accepted solution]

Hi,

There is no additional configuration required in PAN for handling of a local branch traffic to local PSN.

As you rightly said, you need to add local PSN as your radius server on your local NAD's of the branch.

[Mojo98]

Thanks!

[Muhammad Awais Khan]

You are welcome! Just make sure all the branch NAD's are added in ISE PAN as NAD and rest your NAD radius server configuration will take care.