Forum Discussion

Shripaty's avatar
Shripaty
Icon for Cirrus rankCirrus
Oct 06, 2023

Cisco ISE Load Balancing

Hi , I am trying to load balance Auth and Accounting traffic from Cisco ISE. But I have my f5 implemented as f5 VE with a single interface dedicated for traffic and another for Mgmt. The issue is tha...
application delivery
cisco ise
security
F5_Design_Engineer's avatar
F5_Design_Engineer
Icon for MVP rankMVP
Sep 25, 2024

In case instead of using snat did you try using Automap setting in snat parameter

  • gadbekr's avatar
    gadbekr
    Icon for Altocumulus rankAltocumulus
    Sep 26, 2024

    Yes we did try  using automap.  We did not get any two way traffic with automap.  So we setup a SNAT to use the self IP of the F5 gateway for that VLAN.  We see traffic from the source back to the VIP, but it does not go out the VIP to NAD. 

    • Shripaty's avatar
      Shripaty
      Icon for Cirrus rankCirrus
      Aug 28, 2025

      The traffic will go out when you use no translation and the NAD is configured to recieve the traffic from directly from Client IP Address. After this Client makes another connected directly with ISE which requires a Wild Card VIP for Inbound and Outbound connection to be routed from NAD Server segment which has default gateway pointed back to F5 Floating IP Address.