ISE Posture - AnyConnect profile

[hiepnguyen991]

Hi everyone,

In my topo i have 02 psn node (psn1, psn2) and haven't any loadbancer device.

On switch, configured radius-sever with psn1 - priority 1, psn2 - priority 2 so switch can connect to psn1 first.

On PC i have AnyConnect agent and Compliant module version 4.x. I need everyone help me detail about How to config AnyConnect profile to AnyConnect agent can connect psn1 first, if psn1 fail then connect to psn2.

- Discovery host: psn1 or psn2 or both

- Server name rules: psn1 or psn2 or both

- Call Home List: psn1 or psn2 or both

Thankyou very much!

[hiepnguyen991]

Hi,
I need config AnyConnect profile to AnyConnect agent can connect psn1 first, if psn1 fail then connect to psn2 because i have got issue: when PC connect, firstly swicth connect to psn1 to authenticate after authentication successful anyconnect connect to psn2 (not psn1) to posture so that CoA from psn2 to switch not correctly.