asa cluster with ISE

[Ibrahim Jamil]

Hello freinds

with asa clusters , 2 asas in cluster , asa1 and asa2 , asa1 is the master with mgmt ip 192.168.254.250

the mgmt pool consists of pool 192.168.254.251-192.168.254.252

My Question ,when i need to add these cluster to ISE , what IP should i choose ???

thanks

[Karsten Iwen]

What kind of traffic do you want to authenticate on the ISE and what kind of cluster are you talking about?

In general you have to distinguish two functions:

1. Network-traffic: Here all authentications are initiated by the active/master unit. This IP has to be known by the ISE.
2. Admin-traffic: You probably want to login both the active/master-unit and also to the standby/slave-unit. For that both IPs need to be known by the ISE.