cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

856
Views
9
Helpful
6
Replies
Highlighted
Beginner

ISE Configuration in Distributed Environment

                  Hi All,

I have quick questions about  ISE deployment in Distributed environment, as i have purchased 2 X Cisco ise 3395 - For Data Center and 3 X Cisco ISE 3355 for remote location with 3500 Base licences and 500 Advance licences.

i have some questions on this deployment

i will install 1 3395 in Primary Datacenter and other 3395 in Our secondary Data center as Primary admin+Primary Monitoring and Secondary Admin+Secondary Monitoring

and each 3355 will get installed in Remote location as policy server, My Question is it this will be correct deployment?

or while configuring 3395 do i need to configure Policy server as well in addition to Primary admin and monitoring?

or please suggest me best deployment stratagy!

Thanks,

Sachin

Everyone's tags (4)
6 REPLIES 6
Advocate

ISE Configuration in Distributed Environment

Sachin,

How are all the sites connected (via MPLS) based on the equipment the customer must have a good WAN setup.

In most scenarios I usually position the the PSN at the central location anyways but it all depends on how the customer's network is configured.

thanks,

Tarik Admani
*Please rate helpful posts*

Tarik Admani
*Please rate helpful posts*
Beginner

ISE Configuration in Distributed Environment

Thanks for the reply,

all three sites are connected in MPLS with 100MB redundant band width

we are have 2 data center one is primary and other is secondary. and all client locations are connected with 100 Meg links where i am planning to install 3355 which will act as authentication server.

but now my question is

3395 - Primary Admin+Primary Monitoring - Primary DC

3395 - Secondary Admin+ Secondary Monitoring - Secondary DC

3355- will say for one remote location(PSN)

3355- Second remote Location(PSN)

3355- third Remote location (PSN)

thanks,

Sachin

Advocate

ISE Configuration in Distributed Environment

Sachin,

i would suggest the following change:

3395 - Primary Admin+Secondary Monitoring - Primary DC

3395 - Secondary Admin+ Primary Monitoring - Secondary DC

Tarik Admani
*Please rate helpful posts*

Tarik Admani
*Please rate helpful posts*
Beginner

Re: ISE Configuration in Distributed Environment

Thanks I will do.

Can I get any installation document which is prepared at the time of real time implementation ? Like authentication and authorization policy config!

Step by step guide!

Sent from Cisco Technical Support iPhone App

Beginner

ISE Configuration in Distributed Environment

Participant

ISE Configuration in Distributed Environment