Forum Discussion

Shripaty's avatar
Shripaty
Icon for Cirrus rankCirrus
Oct 06, 2023

Cisco ISE Load Balancing

Hi , I am trying to load balance Auth and Accounting traffic from Cisco ISE. But I have my f5 implemented as f5 VE with a single interface dedicated for traffic and another for Mgmt. The issue is tha...
application delivery
cisco ise
security
gadbekr's avatar
gadbekr
Icon for Altocumulus rankAltocumulus
Sep 26, 2024

Yes we did try  using automap.  We did not get any two way traffic with automap.  So we setup a SNAT to use the self IP of the F5 gateway for that VLAN.  We see traffic from the source back to the VIP, but it does not go out the VIP to NAD. 

Shripaty's avatar
Shripaty
Icon for Cirrus rankCirrus
Aug 28, 2025

The traffic will go out when you use no translation and the NAD is configured to recieve the traffic from directly from Client IP Address. After this Client makes another connected directly with ISE which requires a Wild Card VIP for Inbound and Outbound connection to be routed from NAD Server segment which has default gateway pointed back to F5 Floating IP Address.