topic Device administration deployment - License for devices using Radius protocol in Network Access Control

Device administration deployment - License for devices using Radius protocol

dngore — Fri, 11 Jan 2019 08:37:21 GMT

Hi,

Will device administration license per PSN take care devices with Radius protocol or separate base license will require for Radius?

Customer has devices with TACACS+ and Radius protocol. Want to confirm license required for device administration deployment.

Re: Device administration deployment - License for devices using Radius protocol

Surendra — Fri, 11 Jan 2019 09:10:04 GMT

Device administration license is required for TACACS authentications only. You will have to have base license at the very least to serve RADIUS authentications. In short, your client needs both those licenses. Base/Plus/Apex/Mobility licenses are endpoint based. i.e., based on the number of end clients (PCs/Mobiles etc) that would be authenticating against ISE. Device Administration licenses is based on the number of ISE nodes which would serve TACACS authentications (rather, on how many nodes you would enable device administration persona) at any given point of time.

Re: Device administration deployment - License for devices using Radius protocol

dngore — Fri, 11 Jan 2019 10:31:11 GMT

Thx for quick reply.

So in summary, if customer has 10,000 devices having combination like 8000 with TACACS+ and 2000 with Radius for device administration solution then we will require 2000 ISE base license.

Re: Device administration deployment - License for devices using Radius protocol

Surendra — Fri, 11 Jan 2019 10:47:04 GMT

Yes, 2000 base licenses for basic RADIUS functionality and ‘X’ number of device administration licenses where ‘X’ is the number of ISE nodes on which the Device Administration Persona is enabled at a given point of time.

Re: Device administration deployment - License for devices using Radius protocol

Cengiz Savas — Fri, 28 Jun 2019 15:46:22 GMT

I have an additional question regarding the base licenses for RADIUS .

BASE Licenses are usually assigned to active sessions for RADIUS auth. At least for network authn.

Is the base license for RADIUS (device admin) sticked to number of NADs or number of active sessions?

Thanks in advance.