20-Oct-2020 11:41
I have seen in ISE deployment guide they mentioned two different subnet to have Forwarding VSERVER for PSN node. as shown in below snapshoot:
But if we have ISE PSN node in same subnet as VSERVER how we would achieve forwarding VIP?
I have assign same IP as ISE PSN node on FORWARDING VSERVER and point PSN node to F5 SelfIP it worked, but when I restart PSN it wouldn't comeup since it tries to check if there is an existing IP in the network?
12-Nov-2020 07:33
Are you trying to forward traffic from the left side to the ISE-PSN servers? For example, the ISE-PAN-1 needs to talk directly to 10.1.99.5? If so, then you would configure a virtual server of type Forwarding (IP) that would have the address 10.1.99.0/24. You would probably want to enable it only on the VLAN98.