ISE - Routing Multiple Interfaces

[llomjaria]

Hi,

I have ISE medium deployment. 2 PAN & MnT and 2 PSNs.

I have configured BYOD and Posture on PSNs. I configured Gi 1 interface with different IP address which should be used for BYOD and Posture portals.

My question is regarding routing. How ISE handles traffic that comes on Gi1 interface? Will it respond with the same interface or it will use Gi0?
How should I configure routing ?

In some cases NADs and users are in same subnet, so I cannot configure different routes for NADs and users.

[Aref Alsouqi · Accepted solution]

ISE by default routes back the traffic out of the same interface where the traffic was received on.

[llomjaria]

Thanks for the reply!

Here is my current configuration:

ise-psn-1/admin#show ip route

Destination Gateway Iface
----------- ------- -----
169.254.4.0/24 0.0.0.0 cni-podman2
default 172.25.4.1 eth0
169.254.2.0/24 0.0.0.0 cni-podman1
172.25.4.0/24 0.0.0.0 eth0 - Radius/MGMT
172.25.24.0/24 0.0.0.0 eth1 - For Portals

Do I need to add static route: ip route 0.0.0.0 0.0.0.0 gateway 172.25.24.1 - for ISE to users traffic?

[Aref Alsouqi · Accepted solution]

No I don't think so, as that network is a connected network to ISE. However, if you want to configure multiple default routes then yes.

Please refer to ip route section in this guide:

Cisco Content Hub - Cisco ISE CLI Commands in Configuration Mode