Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ISE Question

  In ISE, For the Guest server, can a second NIC interface be used to physically connect the guest interface to a DMZ?  If so, can you provide a link?

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

ISE Question

Running Guest off of another interface has not been  tested thus it

is not officially supported.  You will have the best chance running

Guest on Gig1 and your Profiler collection probes on Gig2 or Gig3.

Another problem with moving  guest portal to a second interface

is that there is currently no option to set a separate management and

guest certificate.  The management certificate is required to be

generated to the hostname of ISE.  That means you would have to have

your users in the DMZ get a DNS response for gig1 and the internal

subnets get a DNS response of gig0 for the same hostname.  I believe

this is the main reason we do not support moving the guest portal off of

gig0 at this time.

1 REPLY
Cisco Employee

ISE Question

Running Guest off of another interface has not been  tested thus it

is not officially supported.  You will have the best chance running

Guest on Gig1 and your Profiler collection probes on Gig2 or Gig3.

Another problem with moving  guest portal to a second interface

is that there is currently no option to set a separate management and

guest certificate.  The management certificate is required to be

generated to the hostname of ISE.  That means you would have to have

your users in the DMZ get a DNS response for gig1 and the internal

subnets get a DNS response of gig0 for the same hostname.  I believe

this is the main reason we do not support moving the guest portal off of

gig0 at this time.

183
Views
0
Helpful
1
Replies
CreatePlease login to create content