Two node ISE cluster. One outside the FW. The other inside the firewall. Customer would like to have initial WLC RADIUS request be sent to the internal ISE. The internal ISE would then send a radius URL redirect for the Outside ISE to the client. The customer does not want to put any firewall holes or second interfaces on the Outside-ISE. Would like that ISE to remain completely outside the firewall. Is this scenario possible for Inside-ISE to start the session and hand off to Outside-ISE session ownership?
