12-12-2019 08:39 PM - edited 12-12-2019 08:52 PM
Hi Team,
Want to check below design possibility for 25K users (will increase 20% - 30% in future)
Will above sizing with mix of 3695 and 3655 work?
Second query: Can existing license (base, plus & Apex) from two ha ISE node setup can be re-hosted on new ISE setup (hybrid)?
Solved! Go to Solution.
12-12-2019 09:07 PM
12-12-2019 08:54 PM - edited 12-12-2019 08:55 PM
One slight correction on this. When you are running in a hybrid design, the dedicated PSNs will have the capacity of a true dedicated node but the deployment is limited by the shared PAN/MNT nodes.
So the 2x 3695's running PAN/MNT are providing you with a total 50k active endpoint capacity as you mentioned. The 2x 3655 PSNs actually have capacity to handle all endpoint auth on a single node, 50k per, giving you 100% HA in a N+1 fashion.
You don't want to exceed 50k scaling, but each PSN can handle a full 50K each. This would be a suitable design providing capacity for patching and node failure scenarios. You would ideally balance endpoint auth 50% and 50% to balance load 25k per PSN.
If this if scoping 4 physical SNS appliances then it's a good solution. If you are looking at hosting this virtual, there is another solution that could be viable. Most VM teams don't like 256 GB VMs. Running 2x 3695 and 2x 3655 requires 706 GB of memory. Running a full dedicated deployment requires 576 GB memory, but more 48,000 more Mhz CPU, and a bit more disk. It really depends what the customer can support.
2x 3655 PAN
2x 3655 MNT
2x 3655 PSN
12-12-2019 09:02 PM
Thx a lot Damien for quick reply. I got on sizing part.
How about re-hosting license from one setup to another? I think it is possible. Is it correct?
12-12-2019 09:07 PM
12-12-2019 09:57 PM
Thx a lot for this helpful reply.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide