Cloud Load Balancers with ISE 

Cisco ISE TME Charlie Moreton explains how load balancers work and demonstrates them working with ISE in a hybrid cloud environment.
Topics:
00:00 Intro & Agenda
01:02 Poll: What load balancers do you use?
02:15 What is a proxy server?
03:10 What is a reverse proxy server?
03:49 Load Balancing to many ISE PSNs and Groups
04:44 Load Balancing Methods: Round Robin, Weighted RR, Hash, Least Connections, Least Time to Connect (first byte, last byte), Random
07:45 Health Checks / Monitoring
08:45 Session Persistence/Affinity/Stickiness and 2/3/5-tuples
11:48 Source NAT for RADIUS Change of Authorization
13:00 Run ISE on the Public Cloud Providers
13:32 Native Cloud Load Balancers Comparison
14:42 Demo Lab Topology
14:54 AWS Network Load Balancer
16:40 Demo: Using radtest to simulate 100 RADIUS sessions with ISE
18:30 Demo: Using Log Analytics (ISE 3.2+) for summarizing RADIUS authentications and sessions
20:50 Demo: AWS Console for Load Balancers & Target Groups
25:40 Azure Standard Load Balancer: learn.microsoft.com/en-us/azu...
26:44 Demo: Azure Load Balancer
28:32 Demo: Azure Portal for Load Balancer and Backend Pools
30:28 Oracle Flexible Network Load Balancer (1 free load balancer per month!)
32:25 Demo: Oracle Load Balancer
36:55 Open Source Load Balancers Comparison: NGINX & traefik
38:39 Demo: NGINX Plus with NGINX App Protect
49:48 Demo: Traefik Configuration
54:27 Demo: ISE Infrastructure Monitoring with Prometheus data from Traefik
56:04 IOS-XE Server Load Balancing (see repository)
56:10 ISEDemoLab Repository: github.com/ISEDemoLab
57:17 Question: How to handle RADIUS COA traffic from very large networks?
Resources:
GitHub Repository for Configurations : github.com/ISEDemoLab/Cloud_B...
ISE Deployment & Load Balancing: cs.co/ise-lb-bp
ISE with F5: cs.co/ise-f5
IOS-XE RADIUS Configuration Guide: cs.co/ios-lb

Наука