All will go well that started well.

The anticipated project kicks off yesterday with 4 SNS server working as Pri PAP, Sec PAP, Pri MnT and Sec MnT. While the other old NAC servers are going to be use as PSN01 and that order.

I have the attached pic of Cisco SNS Server for those who have not seen it before. The first two are SNS-3495-K9 equipment while the two below them are the old NAC 3355.

I was able to reimage the old NAC 3355 to ISE 1.2 while SNS server comes already with Cisco ISE 1.2 pre-loaded you just need to run through the setup.

Now the initial thought will be do you have to spend that long hour inside DAtacenter for the initial setup? Consider the horribly cold environment, no chair and table how will you manage that?

Well in my case I simulated all parameter I need for the initial setup after done I rack the equipment in the datacenter to continue the configuration tomorrow.

Beside, I was generated license for 14,500 endpoint but I am yet to apply. Just waiting till I have my pri admin configure..

That's is for now watch out for day two but if you have any question I will be able to give you detail.

Chalo!

The picture is for backup that we are installing at disaster recovery. The total number of equipment is 9. One Primary Admin, One Sec Admin, One Pry MnT, One Sec MnT, four in total of SNS-3495-k9. NAC3355 is 5 with three at Primary DC and 2 at DR.

Within the current design the deployment will handle 14,500 endpoints.

CIMC is configuration is plan as one of the final phase of the deployment.

Regards,

Good question! I have been thinking of this much earlier before the project. But infrastructure limitation is a major reason I did not think it through earlier. PSN are not sitting behind any load balancer.

I have divided the sites into region but I am still considering different options as follows:

1. Statically assign 1 PSN from Pry DC and 1 from Sec DR each region will have 2 one pry and one secondary. The drawback it that if the two fail manual intervention will be needed.

2. To group each of the side into node and add all the 5 PSN on each NAD.

If you have any other solution kindly share so as to compare notes.

Thank you for bring this up I will want more of this probing question as it will help a lot.