I'm looking to add some vyatta devices to our ISE environment for TACACS+ authentication.  I'm running in to issues getting the correct Attributes sent to the device.  By default, the vyatta dumps you in to "tacplus-operator" role when authenticating...

We are planning to deploy ISE in a distributed fashion using VM appliances.  We will have a Primary/Secondary PAN/Mon and two PSNs.  For this deployment, do we require 4x R-ISE-VM-M-K9 or do we need just the one on the primary PAN?