01-27-2018 01:04 PM - edited 02-21-2020 07:13 AM
01-28-2018 02:04 AM
All ISE policy-config is done on the PAN. But it gets synchronized to the PSN where the actual AAA-work is done. The controller (and for your wired deployment the switches) don't care about the PAN, they need to know which PSN to communicate with.
01-27-2018 01:47 PM
The PSN is running the RADIUS-server (or TACACS for Device-Admin). All devices that are RADIUS- or TACACS-clients point to your PSNs.
01-28-2018 01:05 AM
Hi,
Thanks for your reply.SO on PSN you configure the contoller and on the contoller you configure the PSN?
01-28-2018 02:04 AM
All ISE policy-config is done on the PAN. But it gets synchronized to the PSN where the actual AAA-work is done. The controller (and for your wired deployment the switches) don't care about the PAN, they need to know which PSN to communicate with.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide