Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Why? vMX is for concentrator purposes and would scale much better than deploying racks of MX450's. Especially when the rest of your infrastructure (firewalls, routers, etc) are all virtual in your DC/PoP and the only thing left in racks is MX450's.
I am more so thinking of a case where the ISE deployment was deployed with a public domain (ex: mydomain.com), but the customer wants to use their internal CA for EAP. So i would be requesting EAP certificates with a CN of PSN1.mydomain.com but on a ...