ISE - Resiliency across different subnets

[drbabbers]

All,

I have an ISE setup with 2 nodes in the same network. Is it possible to set this up with addresses in different networks and for them to remain as a pair?

Thanks

D

[jan.nielsen · Accepted solution]

Certainly, just be aware that if you seperate them with firewalls, there is quite a few ports that need to be open.

[Numbisi]

Hello Jan.nielsen,

Thanks for the tip! could you please specify which ports need to be opened?

Kind Regards,

[Venkatesh Attuluri]

yes you can use but make sure that latency is not more than 200ms