Forum Discussion

Shripaty's avatar
Shripaty
Icon for Cirrus rankCirrus
Oct 06, 2023

Cisco ISE Load Balancing

Hi , I am trying to load balance Auth and Accounting traffic from Cisco ISE. But I have my f5 implemented as f5 VE with a single interface dedicated for traffic and another for Mgmt. The issue is tha...
application delivery
cisco ise
security
F5_Design_Engineer's avatar
F5_Design_Engineer
Icon for MVP rankMVP
Oct 09, 2023

Shripaty ,

There a very wonderful Cisco ISE loadbalancing step by step guide available on Cisco Site, not sure if you have come across it or not, i would highly recomment you to please go though it if you have not used it before.

Excellent reference doumnet must be used for CISCO ISE load balancing using F5 ;

https://community.cisco.com/t5/security-knowledge-base/how-to-cisco-amp-f5-deployment-guide-ise-load-balancing-using/ta-p/3631159

Although the above ISE is way too old maybe 1.x and you are on 3.x as of now, but its worth checking.

 

HTH

🙏🙏

 

 

  • Shripaty's avatar
    Shripaty
    Icon for Cirrus rankCirrus
    Oct 10, 2023

    Hi,

     

    Thanks, for the document , I did checked out those doucment but my implementation is a logical inline where f5 wants to act as a full proxy and since  Radius vip should not have any SNAT the traffic moving to ISE from client is not even reaching back to f5 resulting in drop as per the proxy rules

    • gadbekr's avatar
      gadbekr
      Icon for Altocumulus rankAltocumulus
      Sep 19, 2024

      I ran across this document and we are experiencing the same issue trying to load balance ISE behind the F5.  Were you able to accomplish this and if so, what was the issue with the traffic not coming back from ISE.  This seems to be where we are stuck at the moment.