Put pxGrid on same VLAN as PAN or MNT to minimize network traffic?

[dyuen001]

We have dedicated VLAN for PAN, MNT, and PSNs.  Which VLAN should I put pxGrid to minimize any traffic congestion such as traffic between pxGrid clients and MNT? 

[kthiruve · Accepted solution]

HI Danny,

Between ISE nodes we need less than 300ms delay that is the main consideration.

Also you need ports to be open if you have firewall between nodes.

Here is the port reference chart for ISE 2.3.

https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/install_guide/b_ise_InstallationGuide23/b_ise_InstallationGuide23…

Thanks

Krishnan