Hello,
Greetings!
Requesting for help on the below vManage high availability (Disaster Recovery) configuration.
We want to deploy vManage controllers in active/standby (Disaster Recovery) configuration. One vManage will be in primary DC and second vM...
Symptoms
For ISE 3.1 software images which are more than 10GB in size, below re-image options seem to fail.
Re-image using KVM console (mapping vDVD), failsRe-image using CIMC (mapping vDVD), failsUsing bootable USB flash created using LiveCDCreator...
Hello,
We have an ISE distributed deployment of 8 nodes, distributed as shown below,
DC-1SNS-3695-K9Primary Admin NodeDC-1SNS-3695-K9Primary Monitoring NodeDC-1SNS-3655-K9Policy Service NodeDC-1SNS-3655-K9Policy Service Node DC-2SNS-3695-K9Secondar...
Hello, We are in the process of choosing the right ISE software version that is compatible/supported for ISE wired 802.1x deployment for our NAD in the LAN. Below are the NAD we have ,ModelSoftware VersionWS-C4510R+E (SUP7-E)15.2(2)E4WS-C3750X-48PF-S...
Hello, I was working on a ISE 2.4 deployment (patch 5) and found that the CA signed certificates were expired. Strangely, the ISE admin, portal, RADIUS etc. services were accessible. From what I read, this shouldnt happen. Ultimately, the moment I tr...
Hello All,
Recently, we had configured the HA for vManage with Single mode in DC and Single mode DR setup.
Pre-requisites:
Both vManages must have a dedicated NIC card with IP addresses reachable from both vManages.Both vManages must be identical.For...
Hi Ramakrishnan,
Apologies for the delayed response. Hope by now you must have figured out that the LB VIP is to be configured in the WLC for auth redirection.
Optionally you can put the PSN in a node group if they are located in the same DC. This wi...
Hi Clem, For Sponsor Portal, the configuration you have is sufficient. I thought you are trying to add HA for guest portal! However, look for possibility of putting the PSNs behind load balancer. You will get around the certificate warnings if any a...
Hi Rob, The ISE server hardware is,4 x SNS-3695-K94 x SNS-3655-K9Typing mistake! I looked at this document,https://www.cisco.com/c/en/us/td/docs/security/ise/nad_capabilities/nad_capabilities_with_ise.htmlGeneric document, gives comprehensive list o...
Dear Clem58, You need to update your CWA ACL in WLC to reflect other PSN IP addresses. (Similar to first PSN node)Add remaining PSN ip address to WLC (AAA) radius authorization and accounting servers.In the WLC SSID Radius dropdown, select the other ...
