Where to enable the pxGrid role in an ISE deployment?

[REJR77]

Hello,

We have a 4 nodes deployment with 2 PAN/Mnt (Primary / secondary) and 2 PSN that we need to integrate with DNA Center.

We won't have dedicated PxGrid node for that purpose, so where should we enable Pxgrid role?

On the PANs or on the PSNs?

I had a TAC case where I was told to add the pxGrid role to the PSNs, but when reading https://community.cisco.com/t5/security-documents/ise-performance-amp-scale/ta-p/3642148#toc-hId--1992574445 it is said to add the pxgrid to PAN

Thank you

[Spooster IT Services · Accepted solution]

Hello @REJR77,

I would say for 4 node deployment, goes with the document you shared above. Add PXG role to PAN (one as primary and one as secondary for redundancy) and run PSNs on dedicated nodes.

***Please rate all helpful posts***

[Mike.Cifelli · Accepted solution]

On the PANs or on the PSNs?

-I agree.  In your deployment you should enable pxgrid on your PANs and leave the other two nodes as dedicated PSNs.