topic Re: Hi Max- in Network Access Control

Cisco ISE

ugabichipaopao — Mon, 11 Mar 2019 06:42:55 GMT

Hello everyone,

I am planning to implement cisco ISE in my network. I have 1000 endpoints and some mobile devices. I am planning to use distributed approach and use all possible license.

Question is: should I purchase licenses for all nodes. For example 1000 for primary node, 1000 for secondary, 1000 for monitoring and so on?

Or I should purchase only 1000 license (I mean 1000 base+1000 advances+ 100 mobile) ones and apply them to all nodes?

Regards

Max

Hi Max-

nspasov — Wed, 27 Apr 2016 18:47:25 GMT

Hi Max-

ISE is licensed per deployment. So if you have a distributed deployment with let's say 10 ISE servers/nodes you would still only need to license the primary admin node.

Now, if you are planning on having two deployments (let's say one deployment for EMEA and one for APAC) then you would need licenses for two deployments (You would license the primary admin node in each deployment).

I hope this makes sense 🙂

Thank you for rating helpful posts!

To build on Neno's answer:

Joseph Johnson — Wed, 27 Apr 2016 21:00:45 GMT

To build on Neno's answer: Mobility licenses are only needed for strictly wireless (i.e. no wired) clients. If you buy Base/Plus/Apex licenses, that will cover both wired and wireless clients.

In ISE 1.3 and up, there is no Advance licenses. Advance has been split into Plus and Apex. Look at the licensing for the ISE release you are wanting to see which licenses have the functionality you want.

Re: Hi Max-

ptlbhavo — Fri, 14 Sep 2018 19:05:34 GMT

Hi Max,

I understand your response But

What's Term Meaning EMEA and APAC in Distribute environment?

How about think when Cisco ISE Up-gradation 2.3 to 2.4 those time actually necessity to need Cisco SWSS(Software Service support ) ?

Can you Suggest me ?

I will be appreciate for your reply .

Best Regards,

Bhavin

then you would need licenses for two deployments (You would license the primary admin node in each deployment).

Re: Hi Max-

Marvin Rhoads — Sat, 15 Sep 2018 15:00:34 GMT

EMEA = Europe, Middle East and Africa

APAC = Asia Pacific

This was an example whereby one might have separate deployments, one per geographical region. When they are completely separate like that, they must be separately licensed.

To upgrade your ISE software, you must be entitled to do so. The entitlement is sold as an SWSS offering.

Re: Hi Max-

Jason Kunst — Sat, 15 Sep 2018 15:10:45 GMT

You can use smart licensing for a pool of them to share across them